Q & A
Chaz Prichard Construction document hosting security - NDA's
The question was asked of me yesterday if the document management hosting was SOC 2 Type 2 compliant?
If not this specific compliance is there some kind of resource I can provide?
- Policy Brief
- Policy Paper
- Resource Guide
- Policy Bulletin
What/how are other companies ensuring compliance with some of the more stricter NDA clients/owners?
TIA
#security #resource #policy #bulletin
We host with AWS and they have a SOC 2 for their services we use. Our documents host on their S3 product, and we use pre-signed urls to prevent unauthorized access. Currently there is no available SOC 2 document for zzTakeoff, but we do intend on getting one in the future.
Yeah we went thru the security ringer. To make it simple I tell everyone if you can use building connected, you can use zzTO. When you get into CUI where we can't use building connected, you can't use zzTO as a rule of thurmb.