TechnoNetSecurity
How TechnoNet protects the systems we run and the data in them. This page describes our practices at policy level; contracts with each client set the detail for their systems.
Where systems run
- EMAS AI platforms are installed on the customer's own infrastructure. Customer data stays in the customer's environment.
- TechnoNet's hosted services, such as ProjectCore and Gold ERP, run on servers operated by TechnoNet in Malaysia.
Network and access
- All our websites and services use HTTPS, with HTTP Strict Transport Security.
- Public traffic reaches our servers through an encrypted Cloudflare tunnel, which also filters malicious requests.
- Internal services, such as databases, are not published to the internet.
- Administrative access is limited to authorised staff, over encrypted connections from our private network.
- Inside our products, users see only what their role allows.
Data protection
- Data in our hosted services is backed up every night to separate storage.
- Card payments are handled by Stripe. We do not store card numbers.
Software changes
Changes are tested automatically before release, and production releases are approved before they go live. Changes are kept in version control, so every release can be traced and rolled back.
If something goes wrong
If a security incident affects your data, we will tell you without undue delay and help you with any notification to the Personal Data Protection Commissioner.
Reporting a vulnerability
If you find a security weakness in any TechnoNet website or service, please email [email protected] with “Security” in the subject. Please do not access data that is not yours, and give us reasonable time to fix the issue before you disclose it.