Brand Integrity is committed to using technologies that best serve its clients. This article is intended for those who are looking for a more in-depth understanding of the technologies we use and how information is stored inside our platform. If you have any questions or concerns, please don't hesitate to contact firstname.lastname@example.org.
The Brand Integrity Platform
Any person accessing software services from Brand Integrity will be provisioned an account on the Brand Integrity Platform. This platform uses Microsoft Azure to host and scale it's server infrastructure and is built using the Microsoft MVC framework. The Azure hosting environment is regularly patched, updated, and automatically scaled by Microsoft.Click here for Azure's security information.
Collecting user information is essential to provisioning user accounts and operating the platform effectively. Most often, our clients share user account data through a CSV file sent securely to Brand Integrity's production servers. We only require basic information like name, email, department, and location. We promise to:
- Never require sensitive information such as passwords, credit card information or social security numbers
- Always require a secure method of transfer such as SSH or FTP over Secure (FTPS)
- Never send the information to third-party services for reasons other than to augment the platform (such as ad agencies, etc.)
For more information about transferring user data to our platform, please see the article on Creating the User CSV File.
Clients using single sign-on (SSO) functionality to access the platform will use PingOne, an application supported by our single sign-on partner Ping Identity. Ping Identity assists in supplying secure SSO capabilities to our clients.
It is important to note that while Ping Identity helps Brand Integrity facilitate SSO, no additional user information outside of a user's unique token and associated username is shared with Ping Identity. Click here for additional security information about Ping Identity.
For clients who do not use SSO and alternatively log into the platform directly with usernames and passwords, our partner Stormpath handles authentication. Stormpath specializes in the storage and maintenance of usernames and passwords. Click here for more information on Stormpath security.
Transactional data (e.g., recognitions, comments, user information, etc.) written to our platform uses MongoDB as a database, which is also hosted within the Azure environment. We use a service called MongoLab to manage updates, database scalability, mirroring, and data backups. Click here for more information on MongoLab security. Note: The platform does not store any sensitive information such as passwords, social security numbers, or credit card numbers.
We have partnered with GoodData, Inc., to aggregate, analyze, and present results from our platform's recognition and survey programs. Clients who use our reporting functionalities access their results on GoodData's environment, which is embedded inside the Brand Integrity Platform. Partnering with GoodData gives our clients access to world-class reporting and analytical technology. Click here for more information on GoodData's security.