Security at Dastra
Security is an integral part of the structure of our Cloud products, our infrastructure and our processes, so you can be sure that your data is protected.
Two-factor authentication required
All organization owners have the ability to force the use of two-factor authentication.
Authorization list of IP addresses
Organization's owner are able to secure the application's connection using Ip whitelisting
Secure cloud hosting
All of your data is stored at Microsoft Azure in hosting resources located in France and Netherland.
Encryption of data in transit
All data exchanged between our customers and applications is encrypted in transit using the TLS (Transport Layer Security) protocol with PFS (Perfect Forward Secrecy). The encryption certification authority is CloudFlare inc.
Data encryption at rest
The data disks on the servers hosting customer data in the Azure cloud are all encoded at rest using "Transparent data encryption" technology.
The physical files are also statically encrypted in the Azure Storage service with a 256-bit transparent encryption system AES encryption, one of the strongest algorithms which is FIPS 140-2 compliant.
Organization audit logs
Organization administrators can track all changes to user management and access permissions.
Unique identifiers
Each user has a unique identifier and the use of accounts shared between several users is not authorized.
Data backup
All of the data (Azure SQL) and files (Azure Blob Storage) of our users are regularly backed up with a history of one month.
Data archiving rules
In the case of an account deletion, the data is kept for 1 month before its final deletion.
Password rules
At least 8 characters comprising 3 of the 4 types of characters (uppercase, lowercase, numbers, special characters).
Delay in accessing the account after several failures.
Encryption of passwords in databases with strong encryption rules.
API token controls
View and manage all API keys used by developers in your organization
Full access control
Use of the role-base-access-control (RBAC) access management model. The person in charge of the organization is able to choose the roles and permissions of each user.
Secure authentication based on OpenIdConnect for all of our sites
OpenID is a decentralized authentication system that enables single sign-on, as well as attribute sharing. It allows a user to authenticate with several sites (having to support this technology) without having to remember an identifier for each of them but by using each time a unique OpenID identifier.
Last updated
Was this helpful?
