Our security architecture is designed to safeguard sensitive information through industry-leading encryption and cryptographic protocols. To protect data at rest, we utilize the Advanced Encryption Standard (AES) with a 256-bit key size, ensuring that stored information remains inaccessible to unauthorized parties even in the event of physical or digital storage compromise.
For data in transit, we enforce Transport Layer Security (TLS 1.2) or higher to establish secure communication channels between clients and our servers, preventing interception or "man-in-the-middle" attacks. Furthermore, we prioritize identity security by ensuring that passwords are never stored in plain text; instead, they are protected using the SHA-256 cryptographic hashing algorithm, providing a robust layer of defense for user credentials.
We maintain a high security posture through a multi-layered testing strategy
Proactive Code Analysis: We utilize Static Application Security Testing (SAST) which is deeply embedded within our Software Development Life Cycle (SDLC). This allows our developers to identify and remediate potential code-level vulnerabilities before they ever reach a production environment.
Comprehensive Vulnerability Scanning: On a monthly basis, we conduct thorough vulnerability scans specifically tailored to identify risks outlined in the OWASP Top 10. This ensures we are constantly defending against the most critical web application security risks.
Dynamic Application Security Testing: To simulate real-world attacks, we employ Dynamic Application Security Testing (DAST) powered by Veracode. This external validation provides an objective assessment of our running applications to ensure our defenses are resilient against evolving threats.
Beyond technical defenses, we maintain a complete record of system activity through Cadena’s Audit Trail function to ensure full transparency:
Universal Event Logging: Every user action is captured, including data and configuration changes, successful user logins, and unsuccessful login attempts.
Granular Reporting: The system includes advanced filtering capabilities, allowing administrators to monitor specific changes (such as bank account modifications), specific modules, or individual user activity.
Data Integrity: To ensure the reliability of our records, audit reports are immutable; they cannot be deleted or tampered with once generated.
We employ a multi-layered authentication strategy to ensure only authorized users can access sensitive information:
Flexible Authentication: Support for Single Sign-On (SSO) via Local Active Directory (ADFS), Office365, Okta, and Google, alongside a native login option with configurable password complexity rules.
Multi-Factor Authentication (MFA): Native accounts are further secured through MFA via Microsoft Authenticator, Google Authenticator, or email.
Authorization Control: Access is strictly managed through Role-Based Access Control (RBAC), ensuring users have only the permissions necessary for their specific functions.
Cadena only collaborates with data centers or cloud service providers who demonstrate a dedicated commitment to IT security and possess the necessary industry-standard certifications to prove it (e.g. ISO/IEC 27001). This is how we ensure our entire supply chain adheres to the same rigorous protection standards we apply to our own systems.
We perform full system backups on a strict 24-hour cycle to ensure that the most current version of your data is always preserved.
To mitigate risks, all backups are stored securely at a secondary location. This redundancy ensures data remains accessible even if the primary data center is compromised.
To ensure the integrity and availability of our systems, Cadena deploys enterprise-grade firewalls and antivirus protection across all environments. Our security protocols are regularly audited and updated ensuring your data remains protected within a hardened environment.
Cadena utilizes a Security Information and Event Management (SIEM) system to maintain continuous, centralized visibility across our entire infrastructure.
This platform allows us to prevent attacks and monitor for anomalous activity. In the event of a security event, our SIEM enables a rapid, data-driven response to effectively mitigate threats and protect our users' data.
Entry to sensitive infrastructure … requires multi-factor authentication, while the grounds are monitored around the clock by both on-site security teams and strategically placed surveillance.
To ensure continuous operation, the facilities feature redundant climate controls and power management systems, alongside advanced fire suppression technology.
Access to the Customer’s environment shall be restricted exclusively to authorized personnel whose specific job functions require such access.
All granted access is subject to strict oversight by our IT Department.
