Security

Security is the Foundation for our Business and your Trust. Allowing us to have access to your Calendars and/or Contacts and using GRworks to communicate with your customers requires your trust in the infrastructure and application. We take your data security and privacy very seriously. GRworks's platform has been built with a security first focus.

Governance and Compliance

GRworks and its Data Center Provider meet a range of Certifications including ISO27001, SOC 1/2/3 Type II SSAE18, CSA STAR Certified, and EU/US Privacy Shield. We employ a number of third party, qualified security tools to scan our network daily, have 3rd party security experts run quarterly Penetration Tests, and scan our code via integrated static analysis tooling. Firewalls on all servers, Intrusion Detection Systems, Web Server load balancing and Web and Application Level server hardening all contribute to a security in layers approach.

SOC 1/2/3 Type II

GRworks and its Data Center Provider meet a range of Certifications including SOC 1/2/3 Type II SSAE18

Microsoft Azure

GRworks uses Microsoft Azure as its Cloud Infrastructure, the leading Cloud Provider.

Fully Encrypted

Encrypted in transit via TLS and at rest using AES-256 encryption.

No AI Training on User Data

GRworks runs on Microsoft Azure OpenAI LLMs - Customer Data is not used for any AI Training.

Cloudflare

GRworks traffic flows through a stack of security protections including industry-leading DDoS mitigation and cloud firewalls.

FINRA

Cohasset Associates, an independent assessment firm, has certified Microsoft Azure to be in compliance with FINRA Rule 4511(c).

HIPAA Compliant

GRworks is HIPAA Compliant with a Business Associate Agreement (BAA)

GDPR

GRworks helps you stay GDPR Compliant through rigorous reporting and audit logging.

Cloud Security Alliance

Cloud Security Alliance promotes best practices for providing security assurances within Cloud Computing.

OWASP

GRworks Engineers go through extensive Security Best Practices training and follow a SSDLC Management Process.

We work with various Vendors to ensure your client communications are Archived and Journaled properly so you meet FINRA and other Compliance Requirements.