Platform security - Revision history

Maxim@tygron.com: /* Back up and restore strategy */

2026-03-25T15:14:47Z

Back up and restore strategy

← Older revision		Revision as of 15:14, 25 March 2026
Line 56:		Line 56:
	* The user can save multiple versions of the same project to easily revert to a previous version in case of problems.		* The user can save multiple versions of the same project to easily revert to a previous version in case of problems.
	* In the event of calamities such as a disc crash, the customer data will be restored using the external backup, whereby data is only lost up to a maximum of a week.		* In the event of calamities such as a disc crash, the customer data will be restored using the external backup, whereby data is only lost up to a maximum of a week.
	* ~~Back~~-ups of projects are retained for a maximum of 1 month and can be removed by Tygron at request. Data in the backups can also be given access to at request. Early removal of projects and access to data involve costs that are proportional to the hours to be spent for this purpose.		* Automatic back-ups of projects are retained for a maximum of 1 month and can be removed by Tygron at request. Data in the backups can also be given access to at request. Early removal of projects and access to data involve costs that are proportional to the hours to be spent for this purpose.

	== Organisational measures ==		== Organisational measures ==

Maxim@tygron.com: /* Back up and restore strategy */

2026-03-25T15:14:26Z

Back up and restore strategy

← Older revision		Revision as of 15:14, 25 March 2026
Line 56:		Line 56:
	* The user can save multiple versions of the same project to easily revert to a previous version in case of problems.		* The user can save multiple versions of the same project to easily revert to a previous version in case of problems.
	* In the event of calamities such as a disc crash, the customer data will be restored using the external backup, whereby data is only lost up to a maximum of a week.		* In the event of calamities such as a disc crash, the customer data will be restored using the external backup, whereby data is only lost up to a maximum of a week.
	* Back-ups of projects are retained for a maximum of ~~2 years~~ and can be removed by Tygron at request. Data in the backups can also be given access to at request. Early removal of projects and access to data involve costs that are proportional to the hours to be spent for this purpose.		* Back-ups of projects are retained for a maximum of 1 month and can be removed by Tygron at request. Data in the backups can also be given access to at request. Early removal of projects and access to data involve costs that are proportional to the hours to be spent for this purpose.

	== Organisational measures ==		== Organisational measures ==

Maxim@tygron.com at 11:07, 6 March 2026

2026-03-06T11:07:37Z

← Older revision		Revision as of 11:07, 6 March 2026
Line 5:		Line 5:
	* The license is applied by the [[user]] to work in a private [[domain]] protected by a password. This domain is managed by [[Domain Admin (User Account Type)\|the domain manager]], who is a user who determines who has access with which rights and to which [[project]].		* The license is applied by the [[user]] to work in a private [[domain]] protected by a password. This domain is managed by [[Domain Admin (User Account Type)\|the domain manager]], who is a user who determines who has access with which rights and to which [[project]].
	** It is possible to implement [[Account Management#Two-Factor Verification\|two-factor authentication]] for your domain.		** It is possible to implement [[Account Management#Two-Factor Verification\|two-factor authentication]] for your domain.
	** Domain managers can force a [[Account Management#~~TMinimal~~ Password Length\|minimum number of characters]] in new passwords.		** Domain managers can force a [[Account Management#Minimal Password Length\|minimum number of characters]] in new passwords.
	** User passwords are stored via hashes and salting. This prevents the original passwords from being retrieved if they end up with persons that should not have access to them.		** User passwords are stored via hashes and salting. This prevents the original passwords from being retrieved if they end up with persons that should not have access to them.
	** A username can be deleted by the domain manager and by Tygron (at request).		** A username can be deleted by the domain manager and by Tygron (at request).

Maxim@tygron.com at 11:07, 6 March 2026

2026-03-06T11:07:10Z

← Older revision		Revision as of 11:07, 6 March 2026
Line 5:		Line 5:
	* The license is applied by the [[user]] to work in a private [[domain]] protected by a password. This domain is managed by [[Domain Admin (User Account Type)\|the domain manager]], who is a user who determines who has access with which rights and to which [[project]].		* The license is applied by the [[user]] to work in a private [[domain]] protected by a password. This domain is managed by [[Domain Admin (User Account Type)\|the domain manager]], who is a user who determines who has access with which rights and to which [[project]].
	** It is possible to implement [[Account Management#Two-Factor Verification\|two-factor authentication]] for your domain.		** It is possible to implement [[Account Management#Two-Factor Verification\|two-factor authentication]] for your domain.
	** Domain managers can force a [[Account Management#~~Two-Factor Verification~~\|minimum number of characters]] in new passwords.		** Domain managers can force a [[Account Management#TMinimal Password Length\|minimum number of characters]] in new passwords.
	** User passwords are stored via hashes and salting. This prevents the original passwords from being retrieved if they end up with persons that should not have access to them.		** User passwords are stored via hashes and salting. This prevents the original passwords from being retrieved if they end up with persons that should not have access to them.
	** A username can be deleted by the domain manager and by Tygron (at request).		** A username can be deleted by the domain manager and by Tygron (at request).

Maxim@tygron.com at 11:06, 6 March 2026

2026-03-06T11:06:55Z

← Older revision		Revision as of 11:06, 6 March 2026
Line 5:		Line 5:
	* The license is applied by the [[user]] to work in a private [[domain]] protected by a password. This domain is managed by [[Domain Admin (User Account Type)\|the domain manager]], who is a user who determines who has access with which rights and to which [[project]].		* The license is applied by the [[user]] to work in a private [[domain]] protected by a password. This domain is managed by [[Domain Admin (User Account Type)\|the domain manager]], who is a user who determines who has access with which rights and to which [[project]].
	** It is possible to implement [[Account Management#Two-Factor Verification\|two-factor authentication]] for your domain.		** It is possible to implement [[Account Management#Two-Factor Verification\|two-factor authentication]] for your domain.
	** Domain managers can force a minimum number of characters in new passwords.		** Domain managers can force a [[Account Management#Two-Factor Verification\|minimum number of characters]] in new passwords.
	** User passwords are stored via hashes and salting. This prevents the original passwords from being retrieved if they end up with persons that should not have access to them.		** User passwords are stored via hashes and salting. This prevents the original passwords from being retrieved if they end up with persons that should not have access to them.
	** A username can be deleted by the domain manager and by Tygron (at request).		** A username can be deleted by the domain manager and by Tygron (at request).

Rudolf@tygron.nl: /* Data processing agreements */

2026-02-25T13:06:19Z

Data processing agreements

← Older revision		Revision as of 13:06, 25 February 2026
Line 77:		Line 77:

	{{article end		{{article end

	\|seealso=		\|seealso=
	*[https://www.tygron.com/en/blog/2023/03/01/city-of-amsterdam-subjects-tygron-platform-to-rigorous-security-demands/ City of Amsterdam subjects Tygron Platform to rigorous security demands] For more information about our cooperation with municipality Amsterdam and the external pen&hack test.
	}}		}}
	{{User rights nav}}		{{User rights nav}}

Hedi@tygron.com: /* Technical measures */

2025-06-06T15:23:07Z

Technical measures

← Older revision		Revision as of 15:23, 6 June 2025
Line 48:		Line 48:
	** Servers are only accessible for qualified employees and only validated software is installed.		** Servers are only accessible for qualified employees and only validated software is installed.
	* We work by a secure coding policy.		* We work by a secure coding policy.
			* DNSsec is supported

	== Back up and restore strategy ==		== Back up and restore strategy ==

Rudolf@tygron.nl: Merged LTS

2025-03-12T13:46:10Z

Merged LTS

← Older revision		Revision as of 13:46, 12 March 2025
Line 2:		Line 2:

	Tygron observes due care with regard to your privacy and the security of your data. The Tygron Platform is ISO27001 [https://www.tygron.com/wp-content/uploads/2025/01/NL-1994.1.1-Tygron-B.V.-ISO-27001.pdf certified]. Our policy is based on the General Data Protection Regulation (GDPR) and we have taken all relevant technical and organizational measures to protect (personal) data. Our starting points are:		Tygron observes due care with regard to your privacy and the security of your data. The Tygron Platform is ISO27001 [https://www.tygron.com/wp-content/uploads/2025/01/NL-1994.1.1-Tygron-B.V.-ISO-27001.pdf certified]. Our policy is based on the General Data Protection Regulation (GDPR) and we have taken all relevant technical and organizational measures to protect (personal) data. Our starting points are:

	* The license is applied by the [[user]] to work in a private [[domain]] protected by a password. This domain is managed by [[Domain Admin (User Account Type)\|the domain manager]], who is a user who determines who has access with which rights and to which [[project]].		* The license is applied by the [[user]] to work in a private [[domain]] protected by a password. This domain is managed by [[Domain Admin (User Account Type)\|the domain manager]], who is a user who determines who has access with which rights and to which [[project]].
	** It is possible to implement [[Account Management#Two-Factor Verification\|two-factor authentication]] for your domain.		** It is possible to implement [[Account Management#Two-Factor Verification\|two-factor authentication]] for your domain.

Rudolf@tygron.nl at 13:45, 12 March 2025

2025-03-12T13:45:57Z

← Older revision		Revision as of 13:45, 12 March 2025
Line 2:		Line 2:

	Tygron observes due care with regard to your privacy and the security of your data. The Tygron Platform is ISO27001 [https://www.tygron.com/wp-content/uploads/2025/01/NL-1994.1.1-Tygron-B.V.-ISO-27001.pdf certified]. Our policy is based on the General Data Protection Regulation (GDPR) and we have taken all relevant technical and organizational measures to protect (personal) data. Our starting points are:		Tygron observes due care with regard to your privacy and the security of your data. The Tygron Platform is ISO27001 [https://www.tygron.com/wp-content/uploads/2025/01/NL-1994.1.1-Tygron-B.V.-ISO-27001.pdf certified]. Our policy is based on the General Data Protection Regulation (GDPR) and we have taken all relevant technical and organizational measures to protect (personal) data. Our starting points are:

	* The license is applied by the [[user]] to work in a private [[domain]] protected by a password. This domain is managed by [[Domain Admin (User Account Type)\|the domain manager]], who is a user who determines who has access with which rights and to which [[project]].		* The license is applied by the [[user]] to work in a private [[domain]] protected by a password. This domain is managed by [[Domain Admin (User Account Type)\|the domain manager]], who is a user who determines who has access with which rights and to which [[project]].
	** It is possible to implement [[Account Management#Two-Factor Verification\|two-factor authentication]] for your domain.		** It is possible to implement [[Account Management#Two-Factor Verification\|two-factor authentication]] for your domain.

Rudolf@tygron.nl at 13:45, 12 March 2025

2025-03-12T13:45:28Z

← Older revision		Revision as of 13:45, 12 March 2025
Line 1:		Line 1:
	__TOC__		__TOC__

	Tygron observes due care with regard to your privacy and the security of your data. Our policy is based on the General Data Protection Regulation (GDPR) and we have taken all relevant technical and organizational measures to protect (personal) data. Our starting points are:		Tygron observes due care with regard to your privacy and the security of your data. The Tygron Platform is ISO27001 [https://www.tygron.com/wp-content/uploads/2025/01/NL-1994.1.1-Tygron-B.V.-ISO-27001.pdf certified]. Our policy is based on the General Data Protection Regulation (GDPR) and we have taken all relevant technical and organizational measures to protect (personal) data. Our starting points are:

	* The license is applied by the [[user]] to work in a private [[domain]] protected by a password. This domain is managed by [[Domain Admin (User Account Type)\|the domain manager]], who is a user who determines who has access with which rights and to which [[project]].		* The license is applied by the [[user]] to work in a private [[domain]] protected by a password. This domain is managed by [[Domain Admin (User Account Type)\|the domain manager]], who is a user who determines who has access with which rights and to which [[project]].