Security / trust page — Rydoo

Cited by

Facts read from this source

• ISO 27001 Report an error

  “ISO 27001 (Expense Management)”

• SOC 2 type2 expense Report an error

  “SOC 2 Type 2 (Expense Management)”

• Pci dss Report an error

  “PCI DSS (Expense Management)”

• SOC 2 type2 ap Report an error

  “SOC 2 Type 2 (Accounts Payable)”

• Encryption Report an error

  “Rydoo ensures data protection in transit by using at least TLS v.1.2. At-rest data is encrypted with AES TDE.”

• MFA employees Report an error

  “Multi-factor authentication is mandatory for all Rydoo employees and contractors. Access is granted based on the "least privilege" and "need-to-know" principles.”

• Data residency Report an error

  “All data entered into our application is securely stored within Microsoft Azure data centres located in the EU and meets strict security requirements.”

• GDPR Report an error

  “Rydoo is fully compliant with GDPR.”

• Backup recovery Report an error

  “We perform incremental and full daily backups and regularly restore data for testing purposes. Our disaster recovery plan is developed and tested annually. We have defined RPO and RTO, and can provide proof.”

• Penetration testing Report an error

  “Every year, Rydoo conducts penetration testing and vulnerability assessments to identify and address security weaknesses.”

• Vendor risk assessment Report an error

  “We regularly conduct Vendor Risk Assessments to safeguard customer data.”

• Incident response Report an error

  “We have a documented and tested Incident Response Process, which enables efficient incident response and recovery.”

• Minimization Report an error

  “Rydoo only collects and processes data that is necessary to provide its services.”

• Employee training Report an error

  “We have comprehensive employee data security and privacy training powered by KnowBe4.”

• Security incident escalation Report an error

  “We have implemented a process for detecting and addressing security incidents. Our clients can easily contact us in case of incidents.”

• Vulnerability disclosure Report an error

  “You can let us know via our Vulnerability disclosure program on Intigriti.”

• Trust centre Report an error

  “Check the trust centre to learn more about security at Rydoo.”

• Ap module Report an error

  “ACCOUNTS PAYABLE”

• Expense management module Report an error

  “EXPENSE MANAGEMENT”

Scores citing this record

• The Controller European sovereignty
• The Finance Lead European sovereignty
• The Office Manager European sovereignty
• The Skeptic European sovereignty
• The Tax Adviser European sovereignty
• The Travelling Employee European sovereignty