Cloud Security and Certifications

The Trisotech Cloud infrastructure is hosted in Quebec, Canada in the Google Cloud secured data center under the Canadian Federal privacy law as well as Quebec provincial privacy act.

Trisotech External Audit

Trisotech has achieved SOC 2 Type II compliance in accordance with American Institute of Certified Public Accountants (AICPA) standards for SOC for Service Organizations also known as SSAE 18.

Data Center Certifications

Trisotech guarantees the data center infrastructure where customer data is stored complies with International standards and is certified for ISO/IEC 27001:2013 and externally audited in accordance with American Institute of Certified Public Accountants (AICPA) standards for SOC for Service Organizations.

ISO 27001:2013

Trisotech guarantees that its data center provider complies with the ISO 27001:2013 norm. This norm certifies that the required security measures and management procedures are in place.

Download the Certificate

Operational Control

Trisotech guarantees that its data center provider is externally audited regarding the design and operating effectiveness of its controls relevant to security.

Download the SOC 3 report

Communication

All communication between our customers and Trisotech data center is encrypted using an SSL certificate through protocol such as Secure HTTP (https). We also have internal monitoring and control in place to follow the best practices regarding protocols, key exchange and cipher algorithms.

User Authentication and Management

The Trisotech solutions rely on external User Authentication. The following authentication and Single Sign On (SSO) technologies are available:

Azure Active Directory (Cloud/On Premise)
SAML2 (Cloud/On Premise)
LDAP (On Premise)
Active Directory (On Premise)

Trisotech also provides, free of charge, an independent user authentication mechanism called “Trisotech Account”. These accounts guarantee the email ownership and provide password management and resets. All Trisotech Accounts password are encrypted using secured 1-way hash encryption.

Security Report

If you would like to send a security incident report to Trisotech anonymously or using your contact information, please use our Contact us page. Security incident reported to Trisotech will be acknowledged and addressed in a timely manner.