The data centers that host Walliance's IT infrastructure are managed by Ophera 747 s.a.s. Access to the Portal web platform is via HTTPS protocol using Extended Validation SSL certificates (CA / Browser Forum - https://cabforum.org/about-ev-ssl/).
Users identify themselves by email and password. To ensure that passwords are adequately secure, a minimum length of 8 characters and their composition making use of at least uppercase letters, lowercase letters a number and a special character is imposed. Passwords are stored using one-way encryption algorithms (cryptographic hash functions).
The reliability of the Portal is ensured by the use of Google Serverless services with geographic redundancy, both for the web application and the databases. A failure of a server or node does not affect the ability to access the service, nor the ability to access project and user data.
You limit the collection of user information to what is necessary to offer the service and take the necessary steps to ensure the confidentiality of user data, according to industry best practices for preventing common cyber attacks (database injection, XSS, JavaScript injection, etc.).
The system makes use of a real-time database (Realtime Database) on Google Firebase (https://firebase.google.com/docs/database/) for saving and synchronizing the data processed by the Portal. The same database is then redundant on a facility in Big Query, another service offered by Google Cloud, for report processing.
The entire system is periodically backed up and its durable media are kept in a suitable place.
Paper records are kept at the Company's registered office. The registered office is adequately protected from intrusion with alarm devices and external security cameras.
In addition, the Company makes use of computerized tools to store documents in electronic format.
Servers are hosted in the cloud at Google server-farm https://firebase.google.com/products. The server is allocated on European node Frankfurt (europe-west-3). Google Firebase's privacy policy is available at: https://firebase.google.com/support/privacy.
It is one of the IT infrastructures with the highest security parameters in the world.
Access is granted at all times to the Supervisory Authority for the purpose of carrying out any checks within its competence, possibly subject to indemnity for the integrity of the data stored.