DATA-CENTER HOSTING AND CERTIFICATIONS:
Appogee HR develops its applications on Google App Engine. This is a highly scalable and available application hosting and data centre environment which is secured directly by Google’s information, application and network security teams with over 250 security staff working on behalf of Appogee HR and other ISV’s using the Google Cloud Platform. Google’s data center operations and security capabilities provide Appogee with world-class security, performance and availability for our application services as a fully managed 24×7 service. For more information read about Google Data Center security.
HOW WE PROTECT YOUR DATA:
Appogee HR data is automatically encrypted at rest by the Google Cloud Platform. Data is encrypted under 128-bit Advanced Encryption Standard (AES-128), and each encryption key is itself encrypted with a regularly rotated set of master keys. All Appogee Leave servers are hosted with a 2048 bit SSL certificate, which encrypts data between the Appogee HR user’s browser client and our application servers. Some customer licensing data is transferred within Google data-centers between Appogee HR’s application and licensing servers and this is also fully encrypted.
Google control the keys for encryption at rest and Appogee HR controls the SSL certificates (between user and application) and the keys for server to server encryption