Security page — Favro

Cited by

Facts read from this source

• SSO Report an error

  “All plans support SSO via Google and GitHub.”

• SAML Report an error

  “On the enterprise plan Favro offers full support for SAML based authentication. We also support third party authentication services OneLogin and Okta via SAML.”

• SCIM Report an error

  “Favro automatically provisions and disables SAML accounts through the SCIM 1.0 and SCIM 2.0 protocols.”

• Two factor auth Report an error

  “Two factor authentication is available for all Favro password accounts.”

• Encryption in transit Report an error

  “We encrypt all data in transit with TLS 1.2 or later and we carefully enable only ciphers with the highest security.”

• Encryption at rest Report an error

  “The database is encrypted at rest on the servers in the cloud.”

• Region Report an error

  “EU was chosen as the lowest common denominator policy for corporations and governments approval globally.”

• Provider Report an error

  “Amazon AWS and CityCloud host the cloud servers and are our trusted partners.”

• Provider certifications Report an error

  “They are certified for ISO 9001, 14001, 22301, 27001, 27018 and harbour companies like Favro as well as financial institutions.”

• Storage database Report an error

  “Your data is stored in MongoDB and encrypted at rest.”

• Backup locations Report an error

  “Encrypted backups are performed continuously to at least three locations in the EU with point in time recovery.”

• Enterprise plus upcoming Report an error

  “In the upcoming Enterprise Plus plan our customers can even select in which part of the world they would like their data to be stored.”

• ISO certification Report an error

  “Our security and privacy programs have been verified and certified by an independent and accredited third-party ISO/IEC 27001 and ISO/IEC 27701 audits.”

• Pci dss Report an error

  “we are PCI DSS (SAQ A 4.0.1) compliant to ensure the highest standards for all our transactions.”

• Data residency commitment Report an error

  “Until we have implemented customer choice for data locality we have committed to keep the customer data within the EU.”

• Storage locations Report an error

  “All Favro data except uploaded attachments is stored in MongoDB. Uploads are stored in AWS S3 buckets.”

• S3 access security Report an error

  “Buckets have no public access. Access is only granted for upload and download with pre-signed URLs.”

• Presigned URL expiry Report an error

  “The pre-signing URLs that grant read access expire after 24 hours.”

• Backup retention Report an error

  “Point in time backups are stored for at least 1 month back, and monthly backups are stored for at least 6 months”

• Ip whitelisting Report an error

  “We currently don't support IP whitelisting, but on the Enterprise plan you can enable SAML and use the IP whitelisting support of your SAML identity provider.”

Scores citing this record

• The Bootstrapper Onboarding effort
• The Bootstrapper European sovereignty
• The Bootstrapper European sovereignty
• The Bootstrapper Integrations
• The Bootstrapper Onboarding effort
• The Bootstrapper European sovereignty
• The Bootstrapper Onboarding effort
• The Bootstrapper European sovereignty
• The Data Protection Officer Onboarding effort
• The Data Protection Officer European sovereignty
• The Data Protection Officer Integrations
• The Data Protection Officer Onboarding effort
• The Data Protection Officer European sovereignty
• The Data Protection Officer Integrations
• The Data Protection Officer Onboarding effort
• The Data Protection Officer European sovereignty
• The Data Protection Officer Onboarding effort
• The Data Protection Officer European sovereignty
• The Data Protection Officer Support & documentation
• The Enterprise Architect Onboarding effort
• The Enterprise Architect European sovereignty
• The Enterprise Architect Onboarding effort
• The Enterprise Architect European sovereignty
• The Enterprise Architect Integrations
• The Enterprise Architect Onboarding effort
• The Enterprise Architect European sovereignty
• The Enterprise Architect Integrations
• The Enterprise Architect Onboarding effort
• The Enterprise Architect European sovereignty
• The Integrator European sovereignty
• The Integrator European sovereignty
• The Integrator Support & documentation
• The Integrator Integrations
• The Integrator Onboarding effort
• The Integrator European sovereignty
• The Integrator Onboarding effort
• The Integrator European sovereignty
• The Skeptic Onboarding effort
• The Skeptic European sovereignty
• The Skeptic Integrations
• The Skeptic Onboarding effort
• The Skeptic European sovereignty
• The Skeptic Pricing transparency
• The Skeptic Integrations
• The Skeptic Onboarding effort
• The Skeptic European sovereignty
• The Skeptic Integrations
• The Skeptic Onboarding effort
• The Skeptic European sovereignty
• The Skeptic Support & documentation
• The Skeptic Onboarding effort
• The Skeptic European sovereignty
• The UX Purist Onboarding effort
• The UX Purist European sovereignty
• The UX Purist European sovereignty
• The UX Purist Integrations
• The UX Purist Onboarding effort
• The UX Purist European sovereignty
• The UX Purist Integrations
• The UX Purist Onboarding effort
• The UX Purist European sovereignty