Security

Our customers trust us with their sensitive data and we take keeping it safe seriously.

Security Certifications

Optimal Dynamics is System and Organization Controls (SOC) 2 Type 1 certified in accordance with the standards established by the American Institute of Certified Public Accountants (AICPA) with respect to its control structure as it relates to software services offered through it’s platform. Customers trust our solution each day to improve their operations and this certification is an important step in ensuring data security.

Data Security

Optimal Dynamics encrypts data at rest and in transit for all of our customers. We use tools like Amazon Web Service’s Key Management System (KMS) to manage encryption keys using hardware security modules for maximum security in line with industry best practices.

Application Security

Optimal Dynamics regularly engages with security experts for third-party penetration tests. Our penetration testers evaluate the running application, and the deployed environment.

Optimal Dynamics also uses high-quality static analysis tooling to secure our product at every step of the development process.

Infrastructure Security

Optimal Dynamics uses Amazon Web Services to host our application. We make full use of the security products embedded within the AWS ecosystem, including KMS, GuardDuty, and Inspector.

System Security

Servers and Networking

All servers that run Optimal Dynamics software in production are recent, continuously patched Linux systems. Additional hosted services that we utilize, such as AWS Storage, are comprehensively hardened AWS infrastructure-as-a-service (IaaS) platforms.

Our web servers encrypt data in transit using the strongest grade of HTTPS security (TLS 1.2+) so that requests are protected from eavesdroppers and man-in-the-middle attacks. Our SSL certificates are 2048 bit RSA, signed with SHA256.

Internal tier-to-tier requests are signed and authenticated to prevent request forgery, tampering, and replay.

Storage

All persistent data is encrypted at rest using the AES-256 standards or similarly high standards.

Operational Security

Employee Equipment

Optimal Dynamics employee computers have strong passwords, encrypted disks, and firewalls.

Code Reviews and Production Sign Off

All changes to source code destined for production systems are subject to pre-commit code review by a qualified engineering peer that includes security, performance, and potential-for-abuse analysis.

Prior to updating production services, all contributors to the updated software version are required to approve that their changes are working as intended on staging servers.

Service Levels, Backups, and Recovery

Optimal Dynamics infrastructure utilizes multiple and layered techniques for increasingly reliable uptime, including the use of autoscaling, load balancing, task queues and rolling deployments. Currently we also make point-in-time backups, making unintentional loss of received data due to hardware failures very unlikely.

If you have any questions, please reach out to security@optimaldynamics.com.