Skip to main content
Security & Compliance

Security measures

How findIQ protects its production environment and internal IT, which authentication options exist and how to report security vulnerabilities.

Written By Tommy Giesbrecht

Last updated About 3 hours ago

Production environment

Your data is stored in the findIQ production environment (SaaS), which is strictly separated from findIQ's internal IT. Access to it is tightly restricted. Measures include:

  • Brute force detection

  • Identity and access management (IAM)

  • Firewalls and virus scanners

  • Strict access and update management for software and servers

  • Automated security tests

  • Encryption at rest and in transit (TLS/HTTPS)

Internal IT

findIQ follows a zero-trust strategy for its internal IT, supplemented by full device encryption and intrusion detection.

Authentication and access control

  • Sign-in via single sign-on (SSO), for example with Microsoft Entra ID, or with two-factor authentication.

  • Role- and group-based user management, so you control who can access which machines and knowledge, see Roles and access rights.

Audits

findIQ is checked externally in two ways: regular security assessments by LocateRisk and the ongoing ISO 27001 certification. Before a new partnership starts, we are also available for your own IT audit. Details: Certifications and contracts

Reporting a vulnerability

Send security-relevant reports confidentially to security@findiq.com. Our incident response team assesses every report and handles it promptly.

Was this helpful?