Security is an essential part of doing business in the online world and it is the foundation for the Worklio platform and day-to-day operations.

Worklio is a Software as a Service (SaaS) that was built on the latest Microsoft framework for web applications. It is designed specifically for the Microsoft Azure cloud — not an on-premises system that was installed in a virtual machine and called a “cloud”. Each instance is separated to protect each partner company and its customers and workers.

Worklio uses Microsoft Azure DevOps for code management and task management. It is the same system that Microsoft uses to protect Windows, Office and related software. The platform was designed from scratch to use all of the advantages of the Microsoft Azure Cloud, including the built-in security features. It is the latest technology to protect you and your data. In the worst case scenario, there are several options for a fast recovery because source codes and data are stored separately.

The Worklio team is highly skilled with years of experience in different areas of contemporary technology, including an email portal that has had millions of users and the antispyware app Spyware terminator that has been downloaded 400 million times.

Worklio maintains a system of continuous monitoring that exceeds the industry standard for security: 24×7, both in-house and from multiple independent locations.

Annually, Worklio renews its ISO 9001 certification for quality management, ISO 27001 certification for information security management and SOC 2 Type 2. A comprehensive supervisory ISO audit verified compliance in January 2021 and initial certification for SOC 2 Type 2 was issued in November 2021.

All builds and releases are run on dedicated computers with full automation. All source-code changes are logged and can be traced from/to build and released versions, and to each developer. Source code flows through three phases: Test > Staging > Production. All hotfixes are reviewed by senior developers through pull requests. Everything is covered with the same security that Microsoft uses to protect its own source code for Windows and Office.

Worklio maintains a system of continuous monitoring that exceeds the industry standard for security: 24×7, both in-house and from multiple independent locations. Third-party cybersecurity firms are used for security testing, scans and threat detection. There are regular reviews of the platform and the server environment, focusing on all levels of operation.

Open Web Application Security Project (OWASP) practices are followed for secure development procedures and to prevent most known attacks, including XSS, SQL injection and other types.

Worklio hired an outside firm to do penetration testing in 2021 that was completed successfully.

There are regular reviews of the platform and the server environment, focusing on all levels of operation.

Worklio handles all data with care to maintain high standards and best practices, including certification attested to by HIPPA, PCI DSS and ISO 27001. Data is backed up regularly and stored in multiple secure locations throughout the United States. Nightly backups are retained for seven days. Point-in-time restore allows for the re-establishment of the database state to any minute in the preceding 35 days. The Worklio system and data span numerous physical locations, with N+1 or greater redundancy to establish resilience for all components.