Security

The Worklio security system is validated with ISO/IEC 27001:2013 certification.

The International Organization for Standardization (ISO) maintains internationally respected standards for business and ISO 27001 provides requirements for an information security management system (ISMS) in order to enable organizations to manage the security of assets, such as financial information, intellectual property, employee details, and information from third parties.

Encryption

Layers of Security

Worklio uses high-grade TLS and multi-layered encryption with AES-256 and RSA 2048 bit keys.

Advanced Encryption

All sensitive data is encrypted with 256-bit AES encryption, the highest standard available.

Secure Storage

Encryption keys are stored in a secure location and separate from connected data.

Cloud Infrastructure

The Worklio platform is hosted in a cloud infrastructure that is secured at an off-site location.

Ongoing Monitoring

Worklio maintains a system of continuous monitoring that meets and exceeds the industry standard for security.

In-house monitoring is maintained with every day reviews of security.

Third-party cyber security firms are used for security testing, scans and threat detection. The platform is subject to a combination of black-box, white-box, and gray-box testing.

There are regular reviews of the platform and the server environment, focusing on all levels of operation.

Access

Worklio maintains a stratified system of access rights to restrict the number of people who have access to client information.

All changes made by anyone on the platform – administrators, employees, and clients – are logged in an audit system so that all access and data alterations are available.

All employees are subject to significant background checks and vetting to maintain a high level of integrity.

Data

Worklio handles data with care. The data center maintains high standards and best practices, including certification attested to by HIPPA, PCI DSS, ISO 27001, and SSAE 16.

Data is backed up regularly. Should there be any inadvertent loss of data, it can be restored within minutes. Data is stored in multiple secure locations and updated at regularly hourly intervals.

Worklio respects the integrity of data. There will be no effort to use client data for purposes other than as clearly defined by contract. There will be absolutely no selling of data to third parties.

Worklio system and data span numerous physical locations, with N+1 or greater redundancy to establish resilience for all components.

Quality Management

Worklio is also backed by ISO 9001:2015, which sets out the requirements of a quality management system to provide the guidance and tools to ensure that products and services consistently meet customer requirements and that quality is consistently improved.

Worklio is a Microsoft Gold Partner

Worklio is a Microsoft SQL Certified Application

Azure Uptime Guarantee

Worklio servers are hosted in the cloud by Microsoft Azure. The Azure cloud has an uptime guarantee of 99.95%. Worklio has a service-level agreement (SLA) of 99.9%.

Expertise in Xamarin

Worklio is a Xamarin Authorized Consulting Partner so that developers can create top-of-the-line products for Android, iOS, and Windows apps.

Firewall

Worklio uses a web application firewall supporting IPS and DDOS protection.

Reporting

Worklio can provide comprehensive reports for compliance upon request.

Worklio respects the security and quality of all of the data that customers provide.