Igloo is hosted in the industry-leading Microsoft Azure cloud and offers the highest standards of compliance and security at all levels. From guaranteed uptime to regular third-party vulnerability testing, we’ve got you covered.
Igloo digital workplaces are hosted on a private Microsoft Azure cloud infrastructure – the industry leader with 90+ compliance offerings. The facilities are SSAE 16 (SOC 1, SOC 2 Type II) and ISO 27001 compliant.
We offer a multi-tenant or single-tenant solution to meet your needs, and we can host your data in either Canada or the U.S. with a guaranteed uptime of 99.9%.
We provide each customer with a disaster recovery plan to protect critical data. Our response plan includes protocols for impact assessment, backup and recovery, and customer notifications.
We provide complete data backups across redundant primary and secondary site servers with additional service options to meet your requirements.
The Igloo platform is cloud-native, and leverages the Microsoft stack, including the highly secure .NET framework.
At rest, data is encrypted with (minimum) AES-256 (FIPS 140-2 compliance). In transit, all connections to Igloo are secured via SSL/TLS, earning us an A+ rating from Qualys SSL Labs.
The Igloo mobile app offers two options for authentication: Igloo Authentication (including LDAP authentication) using login and password; and SAML authentication.
Igloo’s platform, processes, and networks regularly undergo third-party audits including vulnerability scans, intrusion detection monitoring, and penetration tests.
We apply an array of strategies to secure the environment and data, including firewalls (Network Security Group); antivirus/malware; DDoS avoidance/prevention; and DNS private resolution.
Igloo keeps things simple for end-users through native sign-in and SSO with SAML, and we keep things safe for companies by assigning overall control to IT or any other designated site owner. Igloo also supports LDAP, AD, and IdP like OKTA and OneLogin. Simple to use, but completely secure.
We follow industry best practices for corporate governance with an aim to meet or exceed regulatory requirements. In addition to internal NDAs, we perform background checks of IT and development staff, and our software development lifecycle incorporates Microsoft SDL and OWASP recommendations so that security is at the root of everything we build.
