Vena Solutions SOC 2 status and provider evidence

types of planning, budgeting, reporting and forecasting data sources. Vena maintains a number of procedures to comply with privacy (e.g. PIPEDA) and personal data protection (e.g. GDPR) obligations in the applicable jurisdictions. From a product standpoint, data handling standards are communicated to employees and Vena follows security by design principles to help ensure compliance with data protection requirements. Security Fundamentals Ve

uthentication (optional customer configuration) Download Vena’s Security Datasheet Data Center Security Vena operates only in AWS or Azure data centers that have been certified as ISO 27001 and PCI/DSS Service Provider Level 1. While AWS and Azure have data centers across the globe, Vena Hubs are hosted in Canada, United States or EU cloud regions. Customers can choose which Vena Hub region to leverage in order to meet data residency requirement

(optional customer configuration) Download Vena’s Security Datasheet Data Center Security Vena operates only in AWS or Azure data centers that have been certified as ISO 27001 and PCI/DSS Service Provider Level 1. While AWS and Azure have data centers across the globe, Vena Hubs are hosted in Canada, United States or EU cloud regions. Customers can choose which Vena Hub region to leverage in order to meet data residency requirements and en

mploy best-of-breed technologies and stringent operational processes described on this page to help ensure that customer data is secure. SOC Audits Vena has successfully completed SOC 1 and SOC 2 Type II audits for our platform which were performed by Deloitte LLP. These examinations were conducted in accordance with attestation standards established by the American Institute of Certified Public Accountants (AICPA). SOC 1SOC 1 validates cont

-of-breed technologies and stringent operational processes described on this page to help ensure that customer data is secure. SOC Audits Vena has successfully completed SOC 1 and SOC 2 Type II audits for our platform which were performed by Deloitte LLP. These examinations were conducted in accordance with attestation standards established by the American Institute of Certified Public Accountants (AICPA). SOC 1SOC 1 validates controls relev

pon customer request. Type I assesses the design effectiveness of a system at a certain point in time. Type II assesses the design effectiveness of a system over a period of time. SOC 3 SOC 3 is a public report that summarizes security controls for public trust. Download the SOC 3 Report for Vena on Azure Trusted Cloud Provider Vena is a Trusted Cloud Provider Member with the Cloud Security Alliance (CSA), the world’s leading organization de