Security / trust page — Navan

Cited by

Facts read from this source

• Trust center Report an error

  “we offer a transparent trust profile that empowers you to use our travel and expense platform with full confidence and to fulfill your regulatory requirements.”

• Application security Report an error

  “The security team collaborates closely with the development team to incorporate security measures at every step of the SDLC, including annual penetration testing and regular application security testing as part of the CI/CD pipeline.”

• Detection response Report an error

  “Navan's Detection and Response team is dedicated to threat detection engineering, vulnerability management, incident response, and crisis communication management.”

• Provider Report an error

  “Navan's platform and applications are hosted in AWS cloud data centers located across multiple regional availability zones.”

• Cloud features Report an error

  “Our strategy for securing customer data leverages robust AWS security features, including Virtual Private Clouds (VPCs), Security Groups, the AWS Key Management Service (KMS), and more.”

• Network security Report an error

  “We actively monitor network activity for anomalies 24/7 and respond to security events within minutes. In addition, we've implemented proactive security measures, including perimeter defense and network intrusion prevention systems (IPSs).”

• Security training Report an error

  “Ongoing application security training is mandatory for our developers, and Navan adheres to a multitude of industry best practices and recommendations, including those from the Open Web Application Security Project (OWASP)”

• Encryption Report an error

  “Navan transfers clients' data using multi-layered security mechanisms, fortified networks, and Transport Layer Security (TLS) encryption for data 'in transit.' For sensitive data 'at rest' in storage, we utilize Advanced Encryption Standard (AES)”

• Third party audits Report an error

  “The specifics of our security program are outlined in our third-party security audits and international certifications. Regular audits by third-party assessors evaluate our internal controls”

• Privacy contact Report an error

  “please do not hesitate to contact us at privacy@navan.com.”

• Security contact Report an error

  “please don't hesitate to contact us at security@navan.com”

• Customer security terms Report an error

  “For detailed information regarding our customer security obligations and terms, please refer to our Customer Security Terms.”

• Vendor security terms Report an error

  “For detailed information regarding our vendor security requirements and terms, please refer to our Vendor Security Terms.”

• Capabilities Report an error

  “Business Travel Expense Management Advanced Analytics Navan Rewards Navan Events Sustainability”

• Card issuers Report an error

  “The Navan card is issued by Celtic Bank (Member FDIC), Stripe Technology Europe Limited, Stripe Payments UK Limited, Airwallex Pty Ltd, Adyen N.V. (Europe), Adyen N.V. San Francisco Branch (US), and Adyen N.V. London Branch (UK).”

• Reviews rating Report an error

  “4.7 out of 5 | 9K+ reviews”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Controller European sovereignty
• The Finance Lead European sovereignty
• The Office Manager European sovereignty
• The Skeptic European sovereignty
• The Tax Adviser European sovereignty
• The Travelling Employee European sovereignty