Last Updated: August 19th, 2024
Overview
This policy describes the security measures that FutureView Systems applies generally to the Services. Any capitalized terms used but not defined in this policy have the meaning ascribed to such term in the General Terms and Conditions. References to “FVS”, “we,” “our” and “us” in this policy mean the FutureView Systems entity that is a party to the Agreement with you. References to “you” and any derivatives thereof in this policy mean the Customer entity that is a party to the Agreement with FVS. This policy may be amended by us from time to time and any such changes will be reflected on this page.
Security Measures
Data Security
· Industry standard encryption is used on all resources in our environment.
· Data is encrypted at rest.
· Data moving into and out of our environment is encrypted in transit.
· We utilize AWS public cloud and its service offerings. The following links detail PCI, ISO 27001, and SSAE18 compliance within AWS.
https://aws.amazon.com/compliance/iso-27001-faqs/
https://aws.amazon.com/compliance/pci-dss-level-1-faqs/
https://aws.amazon.com/compliance/soc-faqs/
· Regular testing and evaluation of security measures
Access Controls
· All activity within our environment is monitored and logged.
· Retention policies are in place for audit logs.
· Methods and procedures are in place to detect and report security incidents.
Data Protection
· Appropriate measures are in place to maintain separation of data between environments.
· Systems are backed up regularly with various levels of retention according to internal policies.
· Restoration from backup is tested periodically.
· Documented policies and processes are in place to maintain service and recover from emergencies and disasters.
Secure Development Practices
· Code reviews and penetration testing
· Secure software development lifecycle processes
Physical Security
· With our cloud-based resources, physical access to facilities and data centers is maintained by AWS
Personnel Security
· As part of the employment process, FVS employees are required to undergo a screening process subject to applicable law. Third parties or outside contractors are either screened by FVS, screened as a condition of the contract, or verified as screened by the contractor following a FVS-approved screening process.
Contact
If you feel that we are not abiding by this security policy or have any questions, you should contact us immediately via email at info@futureviewsystems.com