Security / trust page — found from the homepage — Loomly

Cited by

Facts read from this source

• Security email Report an error

  “You can reach our security team at security@loomly.com.”

• Provider Report an error

  “We use infrastructure from AWS for data center hosting.”

• Aws certifications Report an error

  “Our provider data centers are certified as ISO 27001, PCI DSS Service Provider Level 1, SOC 1, SOC 2 and SOC 3 compliant.”

• Pentest frequency Report an error

  “Third-party penetration tests are conducted against the application and supporting infrastructure at least annually.”

• Threat detection Report an error

  “We leverage threat detection services within AWS to continuously monitor for malicious and unauthorized activity.”

• Vulnerability scanning Report an error

  “We perform regular internal vulnerability scans.”

• Ddos protection Report an error

  “We use a number of DDoS protection strategies and tools layered to mitigate DDoS threats.”

• Least privilege access Report an error

  “We comply with the least privilege principle by granting our staff the minimum permissions needed to carry out their jobs.”

• Staff 2FA required Report an error

  “2FA is required for all production systems.”

• Encryption in transit Report an error

  “We force HTTPS for all services using TLS (SSL).”

• Encryption at rest Report an error

  “Data is encrypted at rest with industry-standard encryption algorithms managed by AWS, like AES.”

• Multi az Report an error

  “Services are deployed to multiple availability zones for availability and are configured to scale dynamically in response to measured and expected load.”

• Environment segregation Report an error

  “Testing and production environments are logically separated from one another. No customer data is used in any development or test environment.”

• User 2FA Report an error

  “Additionally, Loomly users can set up two-factor authentication to add an extra layer of security to their account. We support apps like Google Authenticator and others that support Time-based One-time Password Algorithm (TOTP).”

• Google SSO Report an error

  “we also support Google single sign-on (SSO).”

• Oauth credentials Report an error

  “We do not store any credentials for social media accounts. We allow you to connect social accounts to your calendars through an industry-standard process called OAuth, which was designed to avoid sharing credentials and limit access scope.”

• Security training Report an error

  “We deliver a robust Security Awareness Training program which is delivered within 30 days of new hires and annually for all employees.”

• Vendor management Report an error

  “We evaluate all of our vendors before the engagement to ensure their security is to a suitable standard.”

• DPA available Report an error

  “Data Processing Agreement”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Agency Lead Approvals, roles & brand safety
• The Agency Lead Network coverage & API resilience
• The Agency Lead European sovereignty
• The Agency Lead Approvals, roles & brand safety
• The Agency Lead Network coverage & API resilience
• The Agency Lead European sovereignty
• The Analyst Approvals, roles & brand safety
• The Analyst Network coverage & API resilience
• The Analyst European sovereignty
• The Analyst Approvals, roles & brand safety
• The Analyst Network coverage & API resilience
• The Analyst European sovereignty
• The Brand Governance Officer Approvals, roles & brand safety
• The Brand Governance Officer Network coverage & API resilience
• The Brand Governance Officer European sovereignty
• The Brand Governance Officer Approvals, roles & brand safety
• The Brand Governance Officer Network coverage & API resilience
• The Brand Governance Officer European sovereignty
• The Community Manager Network coverage & API resilience
• The Community Manager European sovereignty
• The Community Manager Approvals, roles & brand safety
• The Community Manager European sovereignty
• The Data Protection Officer Approvals, roles & brand safety
• The Data Protection Officer Network coverage & API resilience
• The Data Protection Officer European sovereignty
• The Data Protection Officer Approvals, roles & brand safety
• The Data Protection Officer Network coverage & API resilience
• The Data Protection Officer European sovereignty
• The Skeptic Approvals, roles & brand safety
• The Skeptic Network coverage & API resilience
• The Skeptic European sovereignty
• The Skeptic Approvals, roles & brand safety
• The Skeptic Network coverage & API resilience
• The Skeptic European sovereignty