Commitment to security at Theneo
At Theneo, safeguarding your data is our top priority. We implement robust security protocols, continuously monitor for potential threats, and maintain strict adherence to industry-leading compliance standards. Through proactive measures and regular third-party audits, we ensure your data remains secure, providing you with the peace of mind you deserve.
All data stored is encrypted using advanced encryption standards (AES-256). Sensitive information receives additional protection through application-level encryption, ensuring maximum security.
Data transmitted between our servers and clients is protected using TLS 1.3, providing robust security and ensuring your information remains secure during transfer over any network
We perform regular point-in-time backups of all data to ensure continuity and disaster recovery. The backups are securely stored and maintained for a period of7 days, providing an additional layer of data protection.
Compliance and Security Standards
We proudly uphold certifications and compliance with the following industry standards
Security Controls
With industry best practices, third-party auditors, and a collection of operational controls, Theneo is committed to the safety and confidentiality of your data.
Data Management
- Encrypting data at rest and in transit with AES-256 and TLS 1.2
- Applying pseudonymization and anonymization techniques
- Implementing robust data access controls
- Conducting regular data protection impact assessments (DPIAs)
- Performing daily data backups on AWS
- Documenting data retention and destruction procedures
Access Management
- Enforcing multi-factor authentication (MFA)
- Utilizing OAuth for secure API access
- Regularly reviewing and updating access permissions
- Maintaining strict role-based access controls
- Conducting quarterly internal audits of access
- Implementing strict password policies with 90-day expiration
Incident Management
- Implementing a comprehensive incident response plan
- Conducting regular security incident drills
- Maintaining a detailed incident log
- Performing root cause analysis for major incidents
- Conducting quarterly management reviews of incidents
Compliance Management
- Undergoing annual SOC2 audits
- Conducting quarterly internal compliance audits
- Maintaining GDPR compliance
- Ensuring up-to-date ISO 27001 and ISO 9001 certifications
- Performing annual third-party vulnerability assessments
Risk Management
- Performing continuous risk assessments
- Regularly testing business continuity and disaster recovery plans
- Maintaining cybersecurity insurance
- Integrating security risk assessments into vendor selection
Frequently Asked questions
Everything you need to know about security.
.svg)
Theneo prioritizes security in API management by employing data encryption, strong authentication, and access controls, ensuring comprehensive protection against unauthorized access and data breaches.
Theneo uses industry-standard protocols such as HTTPS and TLS for data encryption to secure data in transit, ensuring that sensitive information remains protected from interception or tampering.
Theneo supports several authentication mechanisms including API keys, OAuth, and multi-factor authentication to verify the identity of users and systems, enhancing security and access management.
Rate limiting helps prevent excessive use and abuse of Theneo's services by setting limits on the number of API requests, which protects against DoS attacks and ensures service availability.
Yes, Theneo regularly updates its security measures and conducts periodic audits to adapt to new security challenges and ensure the platform remains secure against emerging threats.
Users are encouraged to follow best practices such as securing their API keys, using strong  authentication, and ensuring their own systems are secure and regularly updated.
Responsible Disclosure
At Theneo, we prioritize the security of our customers' data. We welcome responsible vulnerability disclosures. If you find a potential security issue, please email us at hello@theneo.io with a detailed description and reproduction steps. Our team will promptly investigate and address the issue, offering rewards for previously unidentified vulnerabilities. Thank you for helping us maintain a secure environment.
.svg)