Security page — OpenProject

Cited by

Facts read from this source

• License Report an error

  “published under the GNU GPL v3”

• Open source Report an error

  “The software code is publicly available on GitHub.”

• GDPR Report an error

  “We handle our customer data with care, and we fulfill all requirements according to the GDPR, the German Federal Data Protection Act (BDSG), and even beyond.”

• Password storage Report an error

  “Passwords stored by OpenProject are securely stored using salted bcrypt.”

• Encryption Report an error

  “Our cloud environment is continuously backing up user data with data encrypted in transit (via TLS/https) and at rest (files, database (including backups) via AES-256).”

• Two factor auth Report an error

  “The two-factor authentication will prevent anyone from accessing or using your account and adds an additional level of security to your project organization.”

• Antivirus scanning Report an error

  “Files uploaded into OpenProject will be scanned for viruses for compliance reasons and will be quarantined or deleted if viruses are found (for on-premises installations).”

• Session timeout Report an error

  “Admins can set a specific session duration in the system administration, so that it is guaranteed that a session is automatically terminated after inactivity.”

• Access control Report an error

  “Admins are provided with fine-grained role-based access control mechanisms to ensure that users are only seeing and accessing the data they are allowed to on an individual project level.”

• Region Report an error

  “With our Enterprise cloud your data is stored on secure servers within the EU.”

• Location Report an error

  “We offer our OpenProject Enterprise Cloud customers an EU data centre where all sub-processors are based in the European Union.”

• DPA Report an error

  “The DPA can be signed directly in your OpenProject Cloud environment.”

• Backup Report an error

  “We provide continuous encrypted data backups being fully encrypted with AES-256 in separate locations.”

• External audit Report an error

  “Regular data privacy assessment and certification by external auditor.”

• Security contact Report an error

  “security@openproject.com”

• Security mailing list Report an error

  “We provide a mailing list for security advisories on OpenProject.”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Bootstrapper Collaboration depth
• The Bootstrapper Integrations
• The Bootstrapper European sovereignty
• The Bootstrapper Support & documentation
• The Bootstrapper Collaboration depth
• The Bootstrapper Integrations
• The Bootstrapper European sovereignty
• The Bootstrapper Support & documentation
• The Bootstrapper Collaboration depth
• The Bootstrapper Integrations
• The Bootstrapper European sovereignty
• The Bootstrapper Support & documentation
• The Bootstrapper Collaboration depth
• The Bootstrapper European sovereignty
• The Bootstrapper Support & documentation
• The Data Protection Officer Collaboration depth
• The Data Protection Officer Integrations
• The Data Protection Officer European sovereignty
• The Data Protection Officer Support & documentation
• The Data Protection Officer Collaboration depth
• The Data Protection Officer Integrations
• The Data Protection Officer Onboarding effort
• The Data Protection Officer European sovereignty
• The Data Protection Officer Support & documentation
• The Data Protection Officer Collaboration depth
• The Data Protection Officer Integrations
• The Data Protection Officer European sovereignty
• The Data Protection Officer Support & documentation
• The Data Protection Officer Collaboration depth
• The Data Protection Officer Reporting
• The Data Protection Officer European sovereignty
• The Data Protection Officer Support & documentation
• The Enterprise Architect Collaboration depth
• The Enterprise Architect Reporting
• The Enterprise Architect Integrations
• The Enterprise Architect European sovereignty
• The Enterprise Architect Support & documentation
• The Enterprise Architect Collaboration depth
• The Enterprise Architect Integrations
• The Enterprise Architect European sovereignty
• The Enterprise Architect Support & documentation
• The Enterprise Architect Collaboration depth
• The Enterprise Architect Integrations
• The Enterprise Architect European sovereignty
• The Enterprise Architect Support & documentation
• The Enterprise Architect Collaboration depth
• The Enterprise Architect Reporting
• The Enterprise Architect European sovereignty
• The Enterprise Architect Support & documentation
• The Integrator Collaboration depth
• The Integrator Integrations
• The Integrator European sovereignty
• The Integrator Support & documentation
• The Integrator Collaboration depth
• The Integrator Integrations
• The Integrator European sovereignty
• The Integrator Support & documentation
• The Integrator Collaboration depth
• The Integrator Integrations
• The Integrator European sovereignty
• The Integrator Support & documentation
• The Integrator Collaboration depth
• The Integrator Reporting
• The Integrator Integrations
• The Integrator European sovereignty
• The Integrator Support & documentation
• The Skeptic Collaboration depth
• The Skeptic Integrations
• The Skeptic European sovereignty
• The Skeptic Support & documentation
• The Skeptic Collaboration depth
• The Skeptic Integrations
• The Skeptic European sovereignty
• The Skeptic Support & documentation
• The Skeptic Collaboration depth
• The Skeptic Integrations
• The Skeptic European sovereignty
• The Skeptic Support & documentation
• The Skeptic Collaboration depth
• The Skeptic Reporting
• The Skeptic European sovereignty
• The Skeptic Support & documentation
• The UX Purist Collaboration depth
• The UX Purist Integrations
• The UX Purist European sovereignty
• The UX Purist Support & documentation
• The UX Purist Collaboration depth
• The UX Purist Integrations
• The UX Purist European sovereignty
• The UX Purist Support & documentation
• The UX Purist Collaboration depth
• The UX Purist Integrations
• The UX Purist European sovereignty
• The UX Purist Support & documentation
• The UX Purist Collaboration depth
• The UX Purist Integrations
• The UX Purist European sovereignty
• The UX Purist Support & documentation