Innovation Within Security Enhancements

As part of our on-going product improvements, we have recently enhanced our security practices  to ensure that your data is always safe and secure. This document outlines these upgrades. If you have any questions about any of this, please contact us at support@innovationwithin.com

In addition to strong security, Innovation Within's commitment to privacy is very clear; we never sell any of your information to any third party. Period. 

Our new authentication system provides additional security and allows customers to have One-Time Passwords and Sign on from Google. For enterprise customers, we offer federation with any SAML endpoint.

Users can now control more of the security of their account through the new "Sessions" tab in the profile menu. You can use this tab to see if anyone else is currently signed in with your account and where.

Our cloud services providers provide world-class security, observability, and physical protection of your resources.

All public endpoints that have access to your data are protected behind world-class firewalls, automatic data loss prevention monitoring, active attack and exploit monitoring and mitigation, and hardened network resources.

Your data is backed up regularly and distributed to disaster-tolerant locations.

All user interactions with the application are encrypted in transit using 256-bit AES encryption. All user data at rest (e.g. in storage) is also encrypted using 256-bit encryption.

Innovation Within follows industry best practices for securing resources. Access to your data is limited to individual trusted employees appointed by the CEO. Our AWS account is also protected by AWS GuardDuty.

All resources Innovation Within uses to compute a customer request are logged following our logging standards policy. System health and real-time metrics related to performance and availability of all the microservices and services that The Discovery Platform relies on are monitored by appropriate employees during regular business hours.

The only personal data that Innovation Within employees have access to is the contact information of the customers. For further information, our privacy policy can be found here: https://innovationwithin.com/privacy-policy/

Innovation Within does not sell or share this information with anyone.

Innovation Within employees are trained on best practices for handling your data and what to do in the event of a security incident.