Security & Compliance
Control who has access,
and see what happened.
Your administrators decide who can open which application and what they may do there, and can review it afterwards. Security is part of how InterCloud designs, builds and operates its products.
In the products
Controls your administrators use
Single sign-on
One InterCloud sign-in for every product. People can also sign in with Google or Microsoft, or with a passkey, where the workspace allows it.
Two-factor authentication
An authenticator app as a second step. A workspace can require it for all of its members.
Role-based access
Access to each application is granted per person, and roles inside each product decide what a person may do.
Audit trails
Security and administration events are recorded, with a history of sign-ins and refused attempts for each account.
Session control
Set the idle timeout, allow or refuse several sessions at once, and sign a person out everywhere.
Sign-in policy
Choose which sign-in methods a workspace accepts and which e-mail domains may be invited.
How we operate
Practices behind the products
- Encryption of data in transit using TLS.
- Role-based access control and least-privilege access for our staff and systems.
- Secure development practices, code review and dependency updates.
- Monitoring and logging of production systems to detect and respond to incidents.
- Customer data is logically separated between customers and backed up regularly.
- Customer data is deleted or returned when a contract ends, as set out in the agreement.
Compliance
Privacy law and recognized frameworks
InterCloud complies with Thailand's Personal Data Protection Act (PDPA) and, where applicable, the EU General Data Protection Regulation (GDPR). TrustFlow, our PDPA consent and privacy management product, gives your organization one record of every consent your customers and staff give.
We align our controls with recognized frameworks such as ISO/IEC 27001 and SOC 2. Certification to ISO/IEC 29110, ISO 9001, ISO/IEC 27001 and ISO/IEC 27701 is in preparation; we will state each one as certified only when its certificate is issued.
Customers may request information about our controls to support their own vendor and security assessments.
Send us your security questionnaire
We answer vendor and security assessments as part of an evaluation.