Security
Data Security is Our Priority
Your data security is our priority. The online video collaboration solutions provided by Apizee are used by thousands of users in critical sectors such as defense, aviation, nuclear, healthcare, and finance.
Apizee guarantees the availability, confidentiality, and integrity of entrusted data, so that every client can use our services with confidence. Our sovereign solutions, 100% made in France, incorporate privacy constraints from the design stage and comply with the General Data Protection Regulation (GDPR). All your data is sensitive, which is why we encrypt communications and information storage.
Apizee is committed to implementing and continuously improving recognized standards for data security, including ISO 27001, HDS, SOC, ANSSI SECNUMCLOUD, and ANSSI CSPN. To keep your data secure, Apizee's Information Systems Security Manager implements and continuously enhances our Information Security Management System.
Resilient High-Security Hosting
The hosting implemented by Apizee ensures optimal data availability, reliability, and security. Our infrastructure meets the highest standards, including ANSSI SECNUMCLOUD, ISO/IEC 27001/27017/27018/27701, HDS/HIPAA, GDPR, CSA STAR, CISPE, and AICPA SOC 1 TYPE II, SOC 2 TYPE II, and SOC 3 audits.
To ensure the resilience of our solutions, data is redundantly stored in three sites, exclusively in Europe. Data is also backed up daily with two hosting providers (OVH and OUTSCALE). Our team ensures the continuous operation of all our platforms 24/7. The data centers we use are protected against any form of intrusion, whether it's digital or physical. For optimal flexibility, our solutions can also be deployed on dedicated servers or within our client's information system.
End-to-End Data Encryption
The real-time communication technology (W3C/IETF WebRTC) integrated into Apizee's solutions inherently includes the Datagram Transport Layer Security (DTLS) data encryption protocol. Additionally, audio and video streams are encrypted using the Secure Real-time Transport Protocol (SRTP), which utilizes the Advanced Encryption Standard (AES) encoding standard. All accesses to Apizee solutions are secured with the HyperText Transfer Protocol Secure (HTTPS) using SSL/TLS encryption and signed certificates (SHA 256 with 2,048-bit public key). Network connections and/or inter-process communication interfaces within the platform use the WebSocket Secure (WSS) protocol with SSL/TLS encryption. All data is stored on encrypted disks.
Compliance Certifications
ANSSI SECNUMCLOUD | Compliance with the framework that sets the security level required for Cloud Service Providers (CSPs).
ISO/IEC 27001 | Process for defining, implementing, evaluating, and improving policies regarding information security management.
HDS | Certification for Healthcare Data Hosting (HDS).
GDPR | Compliance with the General Data Protection Regulation (GDPR) directives.
CSA STAR | Self-assessment against the best practices of the Cloud Security Alliance (CSA).
CISPE | Founding member of Cloud Infrastructure Services Providers in Europe (CISPE) and signatory of its code of conduct.
AICPA SOC 2 | Evaluation report on information systems in terms of security, availability, processing integrity, and confidentiality.
If you have any more questions or need further assistance, feel free to ask!
F.A.Q
Toute personne physique, justifiant de son identité, peut contacter APIZEE (privacy@apizee.com) ou la société qui met en œuvre une solution fournie par APIZEE pour exercer son droit d’accès aux données qui la concernent.
Toutes les données collectées par les solutions d’APIZEE sont conservées exclusivement en France.
Les données sont conservées entre 1 jour et 18 mois, en fonction des besoins du service mis à disposition.
Non, les solutions fournies par Apizee fonctionnent dans un navigateur internet, il n’y a donc aucune application à installer et il n’y a aucun accès aux données stockées sur l’équipement que vous utilisez, que ce soit un smartphone, une tablette ou encore un ordinateur personnel.
Les solutions d’Apizee sont tout à fait utilisables dans le contexte de la e-santé ; elles sont alors hébergées dans un centre de données disposant d’une certification pour l’Hébergement des Données de Santé (HDS).
