Protecting your privacy and data
Teamgo understands how important your data is and we’re committed to making sure that reliability of our services and security of your information are crucial to our service.
Secure cloud software dashboard
Our user focused cloud dashboard is designed for system administrators and employees alike, working across multiple workplace locations.
Teamgo is delivered with security minded principals – permission based access, encryption of data, security of infrastructure..
Your data is stored securely and can only be accessed by people you give authority to for view logs, exporting reports or connecting to other systems with our integrations.
System architecture you can rely on
All Teamgo customer data is securely transferred using HTTPS (industry grade SSL connection) across the Teamgo kiosk app, Teamgo pass smartphone app, Teamgo dashboard and the secure cloud and servers. At rest, data is encrypted using AWS encrypted databases and AWS S3 Server-side Encryption. Teamgo ensures protection against denial-of-service (DoS) attacks using CloudFlare’s advanced DDoS protection.
Security - Privacy - Compliance
Teamgo customers and their data are a core focus of our software development team, with industry leading best practices guiding our evolving product roadmap. We are compliant with many legal and regulatory requirements in the jurisdictions we operate.
If you require certificate and artefact evidences contact our data and privacy team.
Product
Network & Application
Why data security is critical for Visitor Management
Teamgo supports your workplace data, visitors data, employee data and subscription payment information. Including critical information about your visitor processes, the security of the this sensitive data and any billing settings needs to be water-tight.
The Teamgo Promise
Teamgo’s system stores sensitive information and frequently collects personal information as well, such as names, emails, phone numbers and so on. You owe your customers the promise that their data will be handled safely and securely and will never be shared without their consent. We at Teamgo promise to provide you with certainty that our systems will help you deliver this with the utmost respect, care and due diligence.
Employee Training
Teamgo’s employees are highly skilled and trained in all aspects of the Teamgo platform and are trained in many levels of data security and handling sensitive customer data. From both system level and local level security, our staff ensure your data and your customers and guests data are paramount to all our security efforts.
Passwords
Our promise of security extends from the very system that handles all customer data, payment information and is an essential part of our product, processes, and our team’s culture. Our facilities, processes and systems are reliable and third-party tested.
We continuously look for opportunities to make improvements and give you a highly secure, scalable system to provide a great arrival experience to your visitors. Teamgo lets you deliver a secure visitor experience at different levels by,
- Securing personal information
- Securing payment information
- Ensuring your data that rests with Teamgo follows adherence standards.
- Network Security policies we follow within the Teamgo internal network
Administrative Options
Zoni ensures that only employees with a high level of training are able to gain access to administrative services for the sole reason to support and assist our customers. Our administrator accounts have different levels of permission so that data privacy and integrity is maintained and no employee should have access to data and features not relevant to their roles, responsibilities and obligations.
Monitoring & Uptime
At Teamgo, we take data integrity and security very seriously. Due to the nature of the product and service we provide, it is important we acknowledge our responsibilities both as data controller as well as a data processor.
We store and process your data and that of your visitors with care and help you be compliant so that you can continue to build trust while enhancing customer experiences.
We help you assure your visitors that their data is and will always be secure. The promise of security is based on the very system that handles all payment, billing, subscription, and customer data and is an essential part of our product, processes, and team culture.
Our physical facilities, processes and systems are reliable, robust and third-party tested. We continuously look for opportunities to make improvements and give you a highly secure, scalable system to provide a great visitor management experience to your customers.
Teamgo lets you deliver a secure visitor management experience at different levels by,
Securing your customer’s personal information and any associated payment information: compliance to PCI and GDPR.
Ensuring Internal Data security of your data that rests with Teamgo: adherence to ISO, SOC 1 & SOC 2, and MFA standards.
Network Security within Teamgo: Network, application and operational level security policies that we follow.
Data Hosting
ISO 27001 (formally known as ISO/IEC 27001:2013) is a specification for an information security management system (ISMS). An ISMS is a framework of policies and procedures that includes all legal, physical and technical controls involved in an organisation’s information risk management processes with the aim of keeping information secure.
With ISO’s robust information security management system (ISMS) in place, you gain the additional reassurance that a full spectrum of security best practices are implemented across the organization.
Teamgo is committed to identifying risks, assessing implications and putting in place systemised controls that inspire trust in everything that we do – from our codebase to physical infrastructure to people practices.
Physical Security
Network Security
The General Data Protection Regulation (GDPR) is a European privacy law which became enforceable on May 25, 2018. The GDPR replaces the EU Data Protection Directive, also known as Directive 95/46/EC, and is intended to harmonize data protection laws throughout the European Union (EU) by applying a single data protection law that is binding throughout each member state.
Teamgo’s GDPR Commitment
The core of Teamgo’s operations relies on the protection of our customer’s data. We only collect and store information that is necessary to offer our service, and we do this with the consent of our customers. Our approach towards privacy, security, and data protection align with the goals of General Data Protection Regulations – GDPR.
Along with a highly secure and robust system architecture, we have a variety of security measures in place to prevent unauthorised access and processing of personal data.
By setting up an internal compliance team (with functional heads) who worked with an external specialist from a global audit firm, our requirements were assessed and the required changes were rolled out including direct data privacy management functionalities for our customers.
Virtual Private Cloud
Teamgo is supported by Amazon’s AWS platform and infrastructure. Teamgo employees do not have any physical access to the production environment.
Details about security setup of AWS.
Cloud security is the highest priority at AWS. As an AWS customer, we are benefitted from a data center and network architecture built to meet the requirements of the most security-sensitive organizations.
“Amazon has many years of experience in designing, constructing, and operating large-scale data centers. This experience has been applied to the AWS platform and infrastructure. AWS data centers are housed in non-descript facilities, with military grade perimeter control berms. Physical access is strictly controlled both at the perimeter and at building ingress points by professional security staff utilizing video surveillance, state of the art intrusion detection systems, and other electronic means. Authorized staff must pass two-factor authentication no fewer than three times to access data center floors. All visitors and contractors are required to present identification and are signed in. They are also continually escorted by authorized staff.”
In addition to physical security, being on AWS platform also provides us significant protection against traditional network security issues on the infrastructure including,
- Distributed Denial Of Service (DDoS)
- AttacksMan In the Middle (MITM) Attacks
- Port Scanning
- Packet sniffing by other tenants
Teamgo obtains the SOC 1 and SOC 2 report from AWS for the services rendered by them and validates the same for the effectiveness of the opinion of the third party auditor.
Redundancy & Failovers
Teamgo implements use two-factor authentication to grant access for our administrative operations including both, infrastructure and Teamgo services. Administrative privileges are restricted to very few employees. Additionally, both application level roles and AWS roles are used to ensure only required operations are allowed for specific users.
Any administrative access is automatically logged and mailed to our internal security team. Detailed information on when/why the operations are carried out are documented and notified to the security team before performing any changes in the production environment.
Data Encryption
SSH keys are required to gain console access to our servers and each login is identified by a user. All critical operations are logged to a central log server and our servers can be accessed only from restricted and secure IPs.
Hosts are segmented and accesses are restricted based on functionality. That is, application requests are allowed only from AWS ELB and database servers can be accessed only from application servers.
Access & Permissions
-
Secure Access
Teamgo’s application servers can be accessed only via HTTPS. We use industry standard encryption for data traversing to and from the application servers.
-
XSS
All user input is properly encoded when displayed to ensure XSS vulnerabilities are mitigated.
-
CSRF
All POST requests are checked for CSRF token before processing the request.
-
SQL Injection
We use prepared statements for database access to avoid SQL Injection attacks.
-
Encrypted Data Storage
We do not store sensitive card details on any Teamgo network. The keys for various third party services (like payment gateway) are stored in our database in encrypted form.
Vulnerability Scanning & Patching
Incident Responses
Procedures & Policies
We use both internal and multiple external monitoring services to monitor Teamgo. Our monitoring system will alert the Operations & Security Team through emails and phone calls if there are any errors or abnormality in the request pattern.
Regulatory Obligations
At Teamgo, we take data integrity and security very seriously. Due to the nature of the product and service we provide, it is important we acknowledge our responsibilities both as data controller as well as a data processor.
We store and process your data and that of your visitors with care and help you be compliant so that you can continue to build trust while enhancing customer experiences. We help you assure your visitors that their data is and will always be secure. The promise of security is based on the very system that handles all payment, billing, subscription, and customer data and is an essential part of our product, processes, and team culture. Our physical facilities, processes and systems are reliable, robust and third-party tested. We continuously look for opportunities to make improvements and give you a highly secure, scalable system to provide a great visitor management experience to your customers.
Teamgo lets you deliver a secure visitor management experience at different levels by,
- Securing your customer’s personal information and any associated payment information: compliance to PCI and GDPR.
- Ensuring Internal Data security of your data that rests with Teamgo: adherence to ISO, SOC 1 & SOC 2, and MFA standards.
- Network Security within Teamgo: Network, application and operational level security policies that we follow.
Disclosure
We are working continuously to make our system secure. If you find any security issue, please send it to [email protected]. We will make sure the issue is fixed and updated at the earliest.
Your organisations security as our highest priority.
INTEGRITY
Our easy to use, centralised cloud dashboard is designed for administrators and employees alike working across multiple offices and locations. Built for working teams, assign employees to groups with permissions that give them access to the right tools for operating a more efficient workplace.
We store your data on secure cloud servers that can only be accessed by people you specify. Your data is maintained with detailed logs that can be exported with just one click or direct integration to existing systems.
Teamgo is highly sought after for enterprise and government customer or those that require compliance with ISO, SOC, PCI, ITAR, GDPR, and other regulatory frameworks.
Australian Company
Proudly Australian technology company specialising in Visitor Management software and applications.
Amazon Web Services
You expect the best and we rely on the best with cloud hosting and security provided by Amazon AWS Australia.
Fanatical Support
24/7 support available and experienced account managers on standby - we provide hands on customer assistance.
See how Teamgo performs for your workplace
Try our Essential plan FREE for 30 days – no payment or credit card needed.
