Security and privacy by design
Infrastructure
Platform on Amazon Web Services, us-east-1 region, with production, testing and development environments in separate accounts.
Encryption
TLS 1.3 in transit; encryption at rest with keys managed in AWS KMS.
Network protection
Web application firewall, servers in private subnets, administrative access without exposed ports.
Security management
Information security management system aligned with ISO/IEC 27001, in implementation.
Biometric data
Processed only with the person’s authorization and for the stated purpose; retention and deletion policy.
Continuity
Deployment across several availability zones; continuous monitoring.
Vulnerability reporting
Write to our security contact: security@idunicus.com.
Providers that process data
- Amazon Web ServicesInfrastructure
- MongoDB AtlasDatabase for biometric sessions
- FaceTec, Inc.3D facial recognition technology
Retention, location and rights
Retention
Biometric data is processed only with the data subject’s authorization and for the stated purpose, under a retention and deletion policy. Retention and deletion periods are agreed with each customer in the data processing agreement.
Data location
AWS and MongoDB Atlas, both in us-east-1 (Northern Virginia, US). Other locations can be agreed by contract.
Rights requests
To exercise your rights over personal data: privacy@idunicus.com.
Documents on request
- Security architecture overview
- Pre-filled security questionnaire
- Data processing agreement template