1. Best Practices

We follow information security best practices, and use third-party services to confirm what we are doing is effective.

A. SOC 2 Type I

Akuuk has obtained the AICPA's SOC for Service Organizations, SOC 2 Type I. We were audited by Panoramic Synergy Enterprise. Our SOC 2 Type I report can be requested by emailing security@akuuk.com.

B. Security Suite

Akuuk uses a comprehensive security suite to protect its users. This suite includes antivirus, firewall, WAF, patch management, and domain reputation tools. All of these tools are easy to use and have advanced automation features.

C. Monitoring Tools

We use Vanta and Munin to continuously monitor our production and corporate infrastructure.

D. Hosting Providers

We host our platforms on IBM Cloud and Namecheap and uses accredited features and services.

E. Penetration Testing

Our platforms, products and services are tested through external penetration tests performed by third-party security companies on a weekly and monthly intervals.

F. SSL/TLS A Rating

All of Akuuk applications is TLS/SSL-only and scores an A+ rating on Qualys SSL Labs Test.

G. CSA Star Program Member

We have completed the Cloud Security Alliance (CSA) Consensus Assessment Initiative Questionnaire (CAIQ).

2. Security Features

A. Technical Security Controls

1. Access control lists (ACL), intrusion detection and prevention (IDS/IPS), and web application firewalls (WAF).
2. Managed employee devices (MDM, Anti-malware).
3. Data anonymization.
4. Encryption (at rest and in transit).
5. Logical access control (granular privileges), and multi-factor authentication (MFA).
6. Logging and monitoring.
7. Vulnerability management program.

B. Organizational Security Controls

1. Information security policies.
2. Personnel awareness and training.
3. Business resilience planning (disaster recovery and business continuity).
4. Data processing agreements (DPA).
5. External penetration testing.
6. Secure development lifecycle (SDLC).
7. Third-party vendor risk management.

Any Questions?

If you have any questions about the above or anything else about security at Akuuk, we would be happy to answer them. Contact our IT Security department at security@akuuk.com.