Signavio Security

[#1]

Hello, please I need to confirm if Signavio meets the following requirements on its platform:

- Data encryption is compliant with FIPS 140 level 2 or higher?
- Does the platform have implemented Data Loss Prevention (DLP) mechanisms?
- Does it have mechanisms to prevent Distributed Denial of Service (DDoS) attacks (Anti-DDoS)?
- Does it allow its clients to conduct independent vulnerability assessments?

Tanks in advance

Kind Regards

Gustavo Giusto

[Projit · Accepted solution]

Hi Gustavo,

The short answer to your question is yes.

• Data encryption is AES 256 bit by default. KMS of Signavio is backed by FIPS-140-2 compliant hardware security model.
• Signavio follows the SAP security principles for data loss prevention.
• Signavio has DDoS protection at both network and transport layer
• SAP does allow clients to perform penetration testing (on a case-by-case basis) subject to certain terms and conditions

For more detailed security related questions, it might be best to reach out to your Customer Success Partner or Signavio Account Executive to handle them seamlessly.

You can also find a lot of the answers on SAP Trust center.

Cheers,
Projit

[ggiusto · Accepted solution]

Thank you very much for your answer and help. Kind Regards