We Take The Security And Availability Of Your Data Seriously.

Identity Management

• Encryption in transit with SSL/TLS protects data transmitted between you and Vymo.
• Central User management for administrators.
• IP address based white listing and range restrictions.
• User credentials encryption.
• Session Timeout, Vymo times out user sessions if the application is left inactive for configurable time.
• Option to put a imit on simultaneous session(s).
• Increaseing the Entropy of session IDs makes sessions less vulnerable.
• Adoption of OWASP Top Ten into the software development culture.

Device Security

• IMEI # based authentication.
• Rejects compromised devices.
• TTL for cached pages on mobile devices.
• Session timeout support in offline mode.
• Ability to delete data remotely for disabled users.
• Option to put a imit on simultaneous session(s).

Compliance

• Vymo is EU-GDPR Compliant.
• Security practices at Vymo are verified by Third Party Vendors and Audits are conducted at regular intervals.
• Vymo is SOC2 Type II compliant.Vymo is ISO/IEC 27001:2013 certified and all operational processes have been audited by an external accrediated agency and certification body.

Data Security

• Vymo uses TLS v1.3 and PGP to facilitate privacy and data security for communications.
• Protection from complex security attacks using SSL Certificate Pinning.
• Enterprise-grade protocols like AES-256 are put to use to encrypt sensitive PII.
• Comprehensive Rights Management Services, preventing access without right user credentials.
• Ability to mask sensitive data
• Option to not allow any caching of data
• Industry Standard Approach to safeguard Production Keys
• Stringent organizational level controls are followed to ensure safety of PII and supplementary data within the organisation.
• Policy protecting data from third-party use
• Activity log maintenance that tracks all user activities.
• If you choose to leave, you leave with your data.
• Vymo will not use your data for any marketing or advertising purposes.

Risk Management

• Vymo makes the code harder to understand and uses tools that prevent code inspections.
• Vymo doesnt store any password or authentication keys.
• Regular audits are conducted and system is tested by various parties in various areas like Cloud Secure Network Achitecture(SNA) audit, Blackbox application testing and other core areas.
• Comprehensive Rights Management Services, preventing access without right user credentials.

Cloud Security

• IP Address Range restrictions
• ISO 27001
• PCI Level 1
• FISMA Moderate
• Sarbanes-Oxley (SOX)
• Firewalls, DDoS mitigation, Port scanning
• Customer Application Isolation

Data Center and Deployement Architecture

• Robust Data Center Disaster Avoidance and Recovery Policy in place
• Your data is saved in two localized data centers.
• Backups are taken daily
• Escalation matrix defined and provided to key stakeholders for quick resolution

Browser Compatibility

We recommend Vymo web app users to check with their system administrators to ensurethe following system and browsers are available.

Operating System Requirements

Ensure your computers are installed with one of the following operating systems:

• Windows 7.0 or Higher
• OSX Yosemite or Higher

Browser Requirements

• Supported web browsers:
• Google Chrome version 52 or above
• Microsoft Edge
• Internet Explorer 11

Browser Feature Requirements

Depending on the browser of your choice, you must have the following browser features enabled:

• JavaScript must be enabled
• Cookies must be enabled
• LocalStorage must be enabled
• HTTPS – TLS v1.1 or Higher