We know the projects and data you build in Clarizen are core to your strategy and competitive advantage. Clarizen devotes significant resources to keeping your data both secure and private. With Clarizen’s unique architecture and multi-layered approach to protecting your data and monitoring our systems, we have ensured that Clarizen is flexible, scalable and secure.
Clarizen leverages a multi-layer security model, Application firewalls inspect traffic and prevent unauthorized activity, as well provide DDOS protection.
IPS performs deep-packet inspection at the network level and detects unauthorized applications and activities. An antivirus module inspects the stream for viruses, malware and Trojans, and Clarizen uses multi-vendor anti-virus scans to validate virus detection.
Clarizen's firewall, load balancer switches and IPS are clustered to maintain high availability and full redundancy.
Clarizen code is regularly scanned for security vulnerabilities before release. Network and system vulnerabilities are scanned by third-party assessments tools.
Clarizen conducts periodic penetration testing using external companies who specialize in penetration testing.
Clarizen conducts log analysis to identify any events which are relevant to the security and availability of Clarizen systems.
Servers and network equipment logs are delivered to the log analysis server. This server is configured to send alerts any time a threshold has been passed or a correlation rule has been triggered.
Example: If the system will discover threshold that has been passed on multiple component at the Clarizen infrastructure this can indicate on network anomaly activity that need to be investigate.
Email alert will be send to the global Managed Services team.
Clarizen has worked extensively to achieve third party security and privacy accreditation, and has been validated by the US Department of Commerce’s Safe Harbor program, SOC2 type 1, and VeriSign.
Our global Managed Services team monitors Clarizen on a 24/7 basis, using external and internal probes to monitor service availability and security issues These probes are configured to send alerts on a wide variety of criteria, including security, availability, or performance degradation.
Clarizen’s Database is engineered as a cluster to ensure high availability.
Data is replicated to the disaster recovery site via a dedicated encrypted tunnel. Backups are performed daily and restore capabilities are checked to ensure integrity.
To protect our customers’ data and ensure service reliability and availability, Clarizen utilizes several data centers. All data within Clarizen is replicated to a disaster recovery and backup site, hosted within a secure, Tier 1 data center facility.
The data is transmitted over dedicate encrypted tunnel, accordingly to Backups and Restore Policy.
Clarizen service is collocated in dedicated spaces at Tier 1 data centers, SOC I type II certified. As such, all security controls are in place. These facilities provide carrier-level support, including:
