Expedock Security & Compliance

01

Role Based Access Control (RBAC)

Expedock enforces least privileged access through custom roles that can be scoped to the resource level and to specific actions, giving users only the level of access they need at that time.

02

Authentication and Authorization

Expedock enforces trusted user authentication providers such as Auth0 to ensure best-in-class authorization and authentication practices.

03

Cloud Native

Expedock is a fully-managed cloud service, hosted on Amazon Web Services (AWS) and Google Cloud Platform (GCP). Expedock does not operate any physical hosting facilities or hardware of its own.

04

Restricted Views

Expedock implements views for data visualization — stored SQL queries that can only access certain data — with a per-row permission system so no user sees data from any client they don't have access to.

05

Audit Logging

Expedock maintains comprehensive, searchable audit logs of all security-related events including authentication, permissions changes, and privilege assumptions.

06

Employee Training

Expedock conducts rigorous onboarding training so employees only access the data they need, with access revocation as a standard part of offboarding.

01

Data Encryption In Transit

Data between customers and Expedock is encrypted through TLS 1.2 certificates with HSTS, managed by AWS Certificate Manager, with internal communication secured via AWS VPC.

02

Data Encryption At Rest

Data is encrypted across all Expedock services using encryption keys managed by AWS Key Management Service (KMS), never exposed to anyone including Expedock employees.

01

Penetration Testing

Expedock employs a third-party firm to perform regular penetration testing; findings are remediated quickly and available on request.

02

Incident Management

Expedock maintains incident management and disaster recovery playbooks, reviewed regularly.