Data Storage and Server(s) Location
Data for U.S. clients is stored in North Central US (Illinois) with Geo-Redundant replication in South Central US (Texas) MS Azure regions.
In the event of a disaster, there are standby geo replicated servers in East US (Virginia).
Transport Layer Security
Data in transit from client to server/storage is encrypted with TLS 1.2.
Data At Rest Encryption
Data in Azure Storage is encrypted and decrypted transparently using the strongest block ciphers available: 256-bit AES encryption (FIPS 140-2 compliant).
Customers are not permitted to perform their own penetration testing on iCat’s production services. iCat undergoes third-party application penetration testing yearly.
Static Analysis (SAST)
Static Analysis of the application code performed following OWASP best practices.
iCat Leverages the Microsoft Azure Cloud Infrastructure
MS Azure cloud provides high availability geo-redundant services for web applications, networking and data storage infrastructure, using highest levels of security protocols and data compliance standards
iCat is currently undergoing SOC 2 Type II report auditing. Reporting will be disclosed at a later date.