Security / trust page — Perk (formerly TravelPerk)

Cited by

Facts read from this source

• Encryption at rest Report an error

  “Data Encryption at rest”

• Encryption in transit Report an error

  “Data Encryption during transit”

• Vulnerability scanning Report an error

  “Frequent vulnerability scanning”

• Penetration testing Report an error

  “Penetration testing bi-annually”

• Bug bounty Report an error

  “Bug bounty program”

• Threat detection Report an error

  “Advanced threat detection via AWS GuardDuty”

• SSO SAML Report an error

  “SAML based SSO support”

• Ciis membership Report an error

  “we're also a corporate member of the Chartered Institute of Information Security (CIIS)”

• ISMS policies Report an error

  “We maintain a number of policies including an Information Security Policy as part of our Information Security Management System ISMS. These policies are aligned with recognised global best practices in information security such as ISO 27001, SOC Type 2 and cyber essentials”

• Provider region Report an error

  “Our service is hosted in AWS data center in Ireland. AWS is ISO 27001 and SOC2 certified”

• Employee training Report an error

  “we provide in-house designed, role specific training to all employees, new joiners and relevant contractors. We also make use of phishing simulations, custom awareness posters, Capture the Flag style events”

• Access control Report an error

  “We implement role-based access control at Perk. This means that only a limited number of our staff have access to your data, based on their job role.”

• Business continuity Report an error

  “Both our application and support services have a variety of measures in place to ensure we can deliver a high availability service.”

• Vendor audits Report an error

  “We perform a thorough security audit and subsequent risk assessment on all vendors that will host confidential business or client data. We also use continuous security monitoring to keep track of our vendors.”

• Edr Report an error

  “from advanced Endpoint Detection & Response (EDR), through to cloud security and monitoring”

• Physical security Report an error

  “Our offices are all protected with a variety of measures, including 24/7 security guards and CCTV.”

• GDPR program Report an error

  “Data Protection & GDPR We have a thorough compliance program in place.”

• Nda documentation Report an error

  “please submit your queries to your Perk sales representative and we can support you with additional documentation available under NDA.”

• Trust center Report an error

  “Check our Perk Security and Privacy Trust Center for more detailed information.”

• Support 24 7 Report an error

  “24/7 support”

• Duty of care Report an error

  “Duty of Care”

• Card issuer Report an error

  “Cards provided to EEA residents are issued by Transact Payments Malta Limited and cards provided to UK residents are issued by Transact Payments Limited pursuant to licence by Visa Europe Limited.”

• Card issuer regulators Report an error

  “Transact Payments Malta Limited is duly authorised and regulated by the Malta Financial Services Authority as a Financial Institution under the Financial Institution Act 1994. Registration number C 91879. Transact Payments Limited is authorised and regulated by the Gibraltar Financial Service Commission.”

Scores citing this record

• The Controller European sovereignty
• The Finance Lead Company cards & spend control
• The Finance Lead European sovereignty
• The Travelling Employee European sovereignty