Trust, privacy and protection of your data

Astragy uses the latest technology in Internet security. When you visit our site using SSL (Secure Socket Layer) your data is protected using server authentication and data encryption, so your data is secure and protected, and only available to registered users in your organization. Your data is not accessible by your competitors.

Every user in your organization gets a unique username and a unique password from Astragy that have to be entered both each time the user logs on. Astragy hands out a session cookie only to record encrypted authentication information for the duration of a specific session. This session cookie contains neither the user nor the user’s password. Astragy does not use cookies to store confidential user and session information.

Moreover Astragy is hosted in a secure server environment (SAS 70 Type II certified) in which a firewall and other advanced technologies are used to prevent abuse by third parties.

Securing the data of our customers is our highest priority and we are happy to hear reports of possible vulnerabilities or improvements. If you want to report an issue please observe the following procedure:

• Notify us personally of an alleged vulnerability by sending an e-mail to service-desk@astragy.com
• Describe the alleged vulnerability in detail so the security team can verify and reproduce the problem

We explicitly forbid the following:

• The creation or attempt to create a Denial of Service (DoS) situation
• Obtaining or attempting to obtain access to data or information that you do not own
• Destruction or corruption of, or the attempt to destroy or corrupt, data or information that you do not own

Astragy never compensates individuals who report a security vulnerability and any request for such compensation is considered a breach of the conditions described above. In such a case Astragy retains all its legal rights.