{"id":6576,"date":"2024-01-31T11:14:04","date_gmt":"2024-01-31T10:14:04","guid":{"rendered":"https:\/\/www.huwise.com\/?page_id=6576"},"modified":"2025-06-20T11:58:22","modified_gmt":"2025-06-20T09:58:22","slug":"security","status":"publish","type":"page","link":"https:\/\/www.huwise.com\/en\/security\/","title":{"rendered":"Security"},"content":{"rendered":"

Security policy<\/h3>\n

Huwise has created extensive documentation that governs how we organize security, including a security policy. This policy defines our security targets, the associated organization necessary to reach these targets and the associated organizational and technical measures we are taking.<\/p>\n

This policy is based on the ISO 27001 and ISO 27002 standards.<\/p>\n

Security incident management<\/h3>\n

In case of a security incident, Huwise has put in place a process and organizational structure to deal with security incidents as quickly as possible. If the incident involves our customers’ data, we commit to notify the affected customers as soon as possible.<\/p>\n

It should be noted that no such incident has been identified in the last three years.<\/p>\n

Security watch<\/h3>\n

A security inspection is carried out on a daily basis, checking for any vulnerabilities on Huwise\u2019s servers and the software used in our product. If a vulnerability with a major impact is identified, necessary updates are deployed as soon as possible, usually within one day.<\/p>\n

Application security<\/h2>\n

Security during development<\/h3>\n

The Huwise platform is designed around a secure development workflow to ensure code quality before deployment.<\/p>\n

Additionally, it is regularly tested in real-world conditions by our penetration testing program,\u00a0 enabling us to identify and correct possible defects related to development and\/or our infrastructure.<\/p>\n

Password protection<\/h3>\n

User passwords are stored irreversibly in hashed form with the PBKDF2 algorithm. In addition, we offer customers the opportunity to use a customized Identity Provider (IDP) for the authentication of their users. In this case, accounts (and their passwords) are managed only by this external repository.<\/p>\n

Platform security assessment<\/h3>\n

Huwise performs yearly penetration tests and applies its recommendations to reduce the identified risks. In addition to our penetration testing program, an average of 3 penetration tests a year are mandated by our clients on their platform and their recommendations are taken into consideration to improve the platform\u2019s security.<\/p>\n

If you wish to report a security vulnerability, you can contact Huwise\u2019s security team at\u00a0security@huwise.com<\/a>.<\/p>\n

Access control and configuration<\/h2>\n

Data access protection<\/h3>\n

Our client data is protected at three levels:<\/p>\n