Source
Encryption & access control — found from sitemap — Symphony
Checked for Symphony on 13 Oct 2026
- Page
- https://symphony.com/company/securityandcompliance/
- Checked
- 13 Oct 2026, 13:10 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:1805c75f26fd44bac394a363e54816025b4851dd9cebab640c3190c77ee47fa2
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
SOC 2 ISO Report an error
“Symphony prioritizes customer protection and has achieved SOC 2 and ISO certifications.”
-
Encryption standards Report an error
“All Symphony customer data is encrypted to industry-leading standards, both in transit (TLS v1.2) and at rest (AES256).”
-
Providers Report an error
“Symphony’s infrastructure, hosted on Google Cloud and Amazon Web Services (SOC 1, SOC 2, and SOC 3 certified), ensures customer data security.”
-
Load balanced availability zones Report an error
“Web servers and databases are load-balanced across multiple availability zones for enhanced reliability.”
-
SSO SAML Report an error
“Symphony supports single sign-on (SSO) using SAML 2.0 with leading systems like Duo Security, Okta, OneLogin, and Microsoft Entra ID.”
-
Penetration testing Report an error
“Symphony conducts annual third-party penetration testing. This testing simulates real-world cyberattacks and includes critical security risks identified by the Open Web Application Security Project® (OWASP).”
-
GDPR CCPA Report an error
“Symphony prioritizes the compliant handling of personal information and adheres to the standards of both the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).”
-
Data segregation Report an error
“Customer data is secured through logical separation, enforced by strict coding standards, thorough code reviews, and robust database design.”
-
Least privilege access Report an error
“Symphony implements access controls based on the ‘principle of least privilege’, ensuring that customer data is accessible only to authorized employees who require it for their job functions. All system access is logged.”
-
Change management Report an error
“Symphony maintains comprehensive change management controls. All system changes directly affecting Symphony’s customers are subject to meticulous planning and open communication.”
-
Employee security training Report an error
“All employees complete an annual security training program and employ best practices when handling customer data.”
-
ISO 27001 ism Report an error
“Symphony’s information security management system is based on industry best practices (ISO 27001).”
-
Vendor evaluation Report an error
“All vendors handling confidential customer information are mandated to meet industry-leading control standards.”
-
Dpf program Report an error
“Data Privacy Framework (DPF) Program”
-
Dora Report an error
“Digital Operational Resilience Act (DORA)”
-
ISO certifications list Report an error
“ISO27001, ISO27017, ISO27108 Certified”
-
Platforms Report an error
“Symphony’s communications technology, comprising our Messaging, Voice, Directory and Analytics platforms, is engineered for the complex needs of regulated markets”
-
Teams interop Report an error
“Microsoft Teams Interoperability”
-
Confidential cloud Report an error
“Confidential Cloud”
-
Entity Report an error
“© 2026 Symphony Communication Services, LLC. All rights reserved.”
2 facts read from this page are not shown because they could not be confirmed on the page as captured.
Scores citing this record
- The Compliance Counsel Encryption & access control
- The Compliance Counsel Deployment & data custody
- The Compliance Counsel Integrations & extensibility
- The Compliance Counsel European sovereignty
- The Platform Engineer Encryption & access control
- The Platform Engineer Deployment & data custody
- The Platform Engineer Integrations & extensibility
- The Platform Engineer European sovereignty
- The Security Officer Encryption & access control
- The Security Officer Deployment & data custody
- The Security Officer Integrations & extensibility
- The Security Officer European sovereignty
- The Skeptic Encryption & access control
- The Skeptic Deployment & data custody
- The Skeptic Integrations & extensibility
- The Skeptic European sovereignty
- The Team Lead Encryption & access control
- The Team Lead Retention, discovery & co-determination
- The Team Lead Deployment & data custody
- The Team Lead Integrations & extensibility
- The Team Lead European sovereignty
- The Works Council Advocate Encryption & access control
- The Works Council Advocate Deployment & data custody
- The Works Council Advocate Integrations & extensibility
- The Works Council Advocate European sovereignty