[et_pb_section fb_built=”1″ custom_padding_last_edited=”on|desktop” admin_label=”HEADER” module_id=”header” _builder_version=”4.21.0″ background_enable_color=”off” background_enable_image=”off” custom_padding_tablet=”50px|0|50px|0″ custom_padding_phone=”” transparent_background=”off” padding_mobile=”off” make_fullwidth=”off” use_custom_width=”off” width_unit=”on” global_colors_info=”{}” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on” da_disable_devices=”off|off|off”][et_pb_row admin_label=”row” _builder_version=”4.16″ make_fullwidth=”off” use_custom_width=”off” width_unit=”on” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text admin_label=”H1″ _builder_version=”4.22.2″ header_text_align=”center” text_orientation=”center” use_border_color=”off” border_color=”#ffffff” border_style=”solid” global_colors_info=”{}”]<\/p>\n
Detailed overview of the security policies and procedures we use to keep your data safe.<\/p>\n
[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ admin_label=”FEATURES” module_id=”features” _builder_version=”4.16″ global_colors_info=”{}” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on” da_disable_devices=”off|off|off”][et_pb_row _builder_version=”4.22.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.22.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.27.8″ _module_preset=”default” global_colors_info=”{}” locked=”off”]<\/p>\n
Detailed overview of the security policies and procedures we use to keep your data safe.<\/p>\n
Reckon Limited maintains an Information Security Management System (ISMS) that complies with and has been independently certified to the requirements of the ISO\/IEC 27001:2022 standard. This ISMS has been applied broadly throughout Reckon with the following scope statement: \u201cThe systems and services in place to protect the information of the Reckon Business Group, and its customers\u201d. This includes all products sold under the Reckon brand.<\/p>\n
Click here<\/a> to see a copy of Reckon\u2019s ISO27001:2022 certificate.<\/p>\n The ISMS consists of a set of Formal Policies and Procedures that are approved and reviewed at least annually. These Policies and Procedures include:<\/p>\n Reckon is fully compliant with the Payment Card Industry Data Security Standard 4.0 and maintains an Attestation of Compliance under Self-Assessment Questionnaire A (SAQ A \u2013 All Cardholder Data Functions Fully Outsourced)<\/p>\n Reckon products and services are covered by the Reckon Privacy policies found on the Reckon Website. We have specific privacy policies for the different countries we operate in:\u00a0<\/p>\n All Reckon employees and suppliers are retained under contracts that have confidentiality agreements.<\/p>\n All new Reckon employees and contractors complete employment verification and criminal record checks.<\/p>\n All Reckon staff complete security awareness training annually. This training includes the following topics: Security foundations; Cyber-attack evolution; Social engineering; Online and remote threats; Phishing; Internal threats.<\/p>\n A formal Supplier Security Policy is in place. Supplier reviews are conducted annually to ensure compliance. All Suppliers are reviewed and risk assessed according to this policy. Risk assessments consider the nature and sensitivity of data the supplier has access to, and appropriate security controls are then enforced. The following controls are assessed where relevant:<\/p>\n Where a partner wishes to access Reckon Data via API, they need to pass a supplier risk assessment, and additional security checks are enforced in line with the DSPANZ Security Standard for Add-On Marketplaces. This has been enforced for all API partners.\u00a0<\/span>https:\/\/www.dspanz.org\/best-practice\/addon-security-standard\/about-standards\/<\/span><\/a>\u00a0<\/span><\/p>\n Reckon cloud software products primarily store data in Amazon Web Services (AWS) in the Sydney (Australia) region. AWS Sydney maintains an array of current certifications including ISO\/IEC 27001 that require strict industry-standard security mechanisms.<\/p>\n Reckon does not outsource the management of environments in AWS data centers, however, we do hold support contracts and may from time to time receive support assistance from AWS in managing the environments. Reckon staff do not have physical access to these data centers.<\/p>\n Reckon uses a wide array of additional vendors and software to provide services to you and to run our business. Please visit our Data subprocessors<\/span><\/a>\u00a0<\/span>page for a complete list of vendors we use including the location the data is stored.<\/p>\n Reckon has formal access control and data classification policies, procedures and approvals. Access to the administration of production systems is granted only to a small number of staff who have a specific need to do so. This access is required to facilitate deployments, upgrades and emergency troubleshooting only. Multi-factor authentication is enforced for all internal access to the administration of AWS Environments.<\/p>\n From time to time, we may request a copy of your data to diagnose issues. Strict procedures are in place to ensure your data is only ever stored in classified internal systems with restricted access control and multi-factor authentication; is only ever used for the purpose it is requested; and is deleted once the purpose has been completed. Spot checks are conducted regularly to ensure these procedures are followed.<\/p>\n Production data is not used in test environments, however, there is provision to do so in our policies if all personally identifiable information is removed or de-identified.<\/p>\n Reckon has a documented security incident management and response procedure that covers all incidents affecting breaches of confidentiality, integrity, and availability of information. This procedure includes identifying, containing, resolving, communicating and documenting security incidents. Root cause analysis is conducted for all security incidents and improvement recommendations are documented and implemented.<\/p>\n Reckon has a Data Breach Response Plan that meets the requirements of the OAIC Notifiable Data Breaches Scheme. This is reviewed at least annually.<\/p>\n Reckon maintains a Business Continuity Plan and a Disaster Recovery Plan that is tested annually.<\/p>\n Reckon Production systems hosted in AWS are architected for high availability and durability. Componentry is redundant across 3 geographically separated data centers (AWS Availability Zones) within the same AWS Region (Sydney). Systems are designed to cope with the failure of an entire data center, and servers scale up and down daily as load patterns change.<\/p>\n All systems are architected to ensure the durability of data, and are designed to ensure data can be recovered in case of overall system failure (e.g. Disaster Recovery). These backups are not designed to allow the restoration of specific customer datasets.<\/p>\n Reckon Production systems hosted in AWS are architected in such a way that persistent data is simultaneously replicated across 3 geographically separated data centers (AWS Availability Zones) within the same AWS Region (Sydney).<\/p>\n Where this architecture is either not possible or not in place, specific backups are taken for disaster recovery purposes. These are taken at least daily (usually more frequently) and are retained for at least 3 days. Backups of data that are encrypted, remain encrypted. These specific backups are stored in AWS S3 File storage in the Sydney region (and replicated across 3 availability zones).<\/p>\n Backup restoration tests are performed at least once a year.<\/p>\n We have achieved and will continue to target uptime of at least 99.9%<\/p>\n Reckon engages Solution architects from AWS to conduct\u00a0<\/span>Well Architected<\/span><\/a>\u00a0reviews of our architecture when we build out new platforms. These reviews include all 5 Pillars, including the\u00a0<\/span>Security Pillar<\/span><\/a>. The recommendations of these reviews are documented, risk assessed, and improvements then made to ensure industry security standards are met.\u00a0<\/span>\u00a0<\/span><\/p>\n Reckon engages CyberCX for Penetration Testing. An annual penetration test cycle is in place.<\/p>\n Reckon cloud products enforce complex passwords with minimum length requirements. Reckon Accounts Hosted includes the option to enforce MFA and in other products high-privilege functions such as lodging via GovConnect require a mandatory multi-factor authentication (MFA) challenge.<\/p>\n All data transiting over public networks is encrypted using the Transport Layer Security protocol.<\/p>\n All Reckon cloud products encrypt customer data at rest using the AES 256 encryption algorithm.<\/p>\n We keep segregated networks and maintain separate firewalls between each network. Load balancers are separated from front-end systems, which are separated from back-end systems. Procedures including approvals are in place for making changes to networks and firewalls. Our corporate, development and staging networks are completely separated from production networks.<\/p>\n System, Access, Firewall and API audit logs are kept and retained for at least 12 months. Logs are monitored for availability, anomalies and security risks with flagged entries alerted to team members who maintain an on-call rotation.<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ module_class=”cta” _builder_version=”4.16″ global_colors_info=”{}” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on” da_disable_devices=”off|off|off”][et_pb_row column_structure=”3_5,2_5″ make_equal=”on” _builder_version=”4.16″ global_colors_info=”{}”][et_pb_column type=”3_5″ _builder_version=”4.16″ global_colors_info=”{}”][et_pb_text admin_label=”Get started with Reckon One today! ” _builder_version=”4.21.0″ background_layout=”dark” text_orientation_tablet=”center” text_orientation_phone=”” text_orientation_last_edited=”on|tablet” global_colors_info=”{}”]<\/p>\n Unlimited users. Cancel anytime. Security at Reckon Detailed overview of the security policies and procedures we use to keep your data safe.Security at Reckon Detailed overview of the security policies and procedures we use to keep your data safe. Information Security Management System Reckon Limited maintains an Information Security Management System (ISMS) that complies with and has been independently […]<\/p>\n","protected":false},"author":4,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"_lmt_disableupdate":"no","_lmt_disable":"","footnotes":""},"difl_page_category":[],"class_list":["post-258963","page","type-page","status-publish","hentry"],"yoast_head":"\n\n
PCI Compliance<\/strong><\/h4>\n
Privacy Policy<\/strong><\/h4>\n
\n
Confidentiality<\/strong><\/h4>\n
Background Checks<\/strong><\/h4>\n
Training<\/strong><\/h4>\n
Suppliers<\/strong><\/h4>\n
\n
API Partners<\/strong><\/h4>\n
Data Hosting<\/strong><\/h4>\n
Internal Data Access Controls<\/strong><\/h4>\n
Customer Data Handling Procedures<\/strong><\/h4>\n
Data in Test Environments<\/strong><\/h4>\n
Incident Management<\/strong><\/h4>\n
Data Breach Response<\/strong><\/h4>\n
Business Continuity and Disaster Recovery<\/strong><\/h4>\n
Backups<\/strong><\/h4>\n
Availability<\/strong><\/h4>\n
Security Reviews and Penetration Tests<\/strong><\/h4>\n
Authentication<\/strong><\/h4>\n
Encryption in Transit<\/strong><\/h4>\n
Encryption at Rest<\/strong><\/h4>\n
Networking and firewalls<\/strong><\/h4>\n
Logging and Monitoring<\/strong><\/h4>\n
Try Reckon One today, for free!<\/h2>\n
\n[\/et_pb_text][\/et_pb_column][et_pb_column type=”2_5″ _builder_version=”4.16″ global_colors_info=”{}”][et_pb_button button_url=”https:\/\/www.reckon.com\/nz\/accounting-software\/#pricing” button_text=”Start 30-day free trial” button_alignment=”center” _builder_version=”4.23″ custom_margin_tablet=”35px||||false|false” custom_margin_phone=”” custom_margin_last_edited=”on|tablet” custom_padding_tablet=”||||false|false” custom_padding_last_edited=”off|tablet” saved_tabs=”all” global_colors_info=”{}”][\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"