We’re Serious About Data Privacy & Security
Seam Technologies provides data-driven insights with uncompromising security to measure and assess workflows in a targeted and actionable way.
Data Protection
Data at Rest
All datastores with customer data, in addition to S3 buckets, are encrypted at rest.
This means the data is encrypted even before it hits the database, so that neither physical access nor logical access to the database, is enough to read the most sensitive information.
Data in Transit
Seam uses TLS 1.2 or higher everywhere data is transmitted over potentially insecure networks. Server TLS keys and certificates are managed by AWS and deployed via Application Load Balancers.
Secret management
Encryption keys are managed via AWS Key Management System (KMS). KMS stores key material in Hardware Security Modules (HSMs), which prevents direct access by any individuals, including employees of Amazon and Seam. The keys stored in HSMs are used for encryption and decryption via Amazon’s KMS APIs.
Application secrets are encrypted and stored securely via AWS Secrets Manager, and access to these values is strictly limited.
Enterprise Security
Endpoint Protection
All corporate devices are centrally managed and are equipped with mobile device management software and anti-malware protection. We use MDM software to enforce secure configuration of endpoints, such as disk encryption, screen lock configuration, and software updates.
Secure remote access
Seam secures remote access to internal resources using NordVPN, a modern VPN platform built on WireGuard. We also use malware-blocking DNS servers to protect employees and their endpoints while browsing the internet.
Identity and Access Management
Seam uses Google Workspace to secure our identity and access management. We enforce the use of two-factor authentication wherever possible.
Seam employees are granted access to applications based on their role, and automatically deprovisioned upon termination of their employment. Further access must be approved according to the policies set for each application.
Enterprise Security
Vulnerability Scanning
Seam requires vulnerability scanning at key stages of our Secure Development Lifecycle (SDLC):
- Static analysis (SAST) testing of code during pull requests and on an ongoing basis
- Software composition analysis (SCA) to identify known vulnerabilities in our software supply chain