Celona security and privacy

An architecture designed to address the unique challenges of securing increasingly digitized industrial IT and OT systems, AerLoc provides enhanced security and visibility without sacrificing performance.

Celona complies with the General Data Protection Regulation (GDPR), so that your personal data is handled responsibly and transparently. Celona provides its customers with a Data Processing Agreement and relies upon the standard contractual clauses for the transfer of your data to Celona’s data centers in the United States.

Achieving SOC 2 Type II certification signifies that Celona adheres to the highest standards for security, availability, and confidentiality in cloud-based service delivery. This rigorous certification involves an independent audit to verify that our controls are not only in place but consistently followed over an extended period. It’s a testament to our dedication to safeguarding your data and ensuring operational excellence.

In addition to the SSDLC, Celona has a vulnerability management process that includes regular internal scanning and testing for network and application vulnerabilities, stringent SLAs on fixing vulnerabilities based on their CVSS scores and periodic penetration testing with reputed external security testing vendors.

At Celona, we follow a Secure Software Development Lifecycle that is derived from the NIST Secure Software Development Framework.

We embrace the shift left security model of incorporating sound security practices like threat modeling, reviews, secure coding practices for device and cloud software, static code analysis, security testing and continuous risk assessment in every stage of software development. Engineers must go through mandatory security training on a recurring basis.