Network and Application Penetration Tests
Do you conduct network/application penetration tests of your cloud service infrastructure regularly?
Yes.
Tenant Data Encryption and Segmentation
Is Auto Insights able to logically segment/encrypt customer data in such a way that access to data is confined to a single tenant without being provided inadvertently to other tenants?
All tenant data is stored in logically discrete Azure blobs protected by Azure information protection.
Data Storage Location
Are you able to restrict the storage of customer data to specific countries or geographic locations? Do you provide tenants with geographically-resilient hosting options?
Yes, Auto Insights is hosted by Microsoft Azure, which supports a network of MS-managed data centers distributed globally.
Information Security System Management
Do you restrict, log and monitor access to your information security management systems (for example, hypervisors, firewalls, vulnerability scanners, network sniffers, and APIs)?
Access to information security management is restricted to the Auto Insights CTO, who maintains, logs, and monitors the system.
Firewalls
Are system and network environments protected by a firewall or virtual firewall to ensure compliance with legislative, regulatory, and contractual requirements?
Yes.