Security
Security built for enterprise procurement
Enterprise foodservice buyers put App8 through IT and procurement review. We are certified to PCI DSS Level 1, encrypt data in transit, control access tightly, integrate with your identity provider, and share our security documentation on request.
Payments
Certified to PCI DSS Level 1
App8 is certified to PCI DSS Level 1, the highest level of the Payment Card Industry Data Security Standard, for operators processing payments at scale. Card data stays inside that certified environment, not in your spreadsheets or ours.
PCI DSS Level 1
The highest tier of the card-industry standard, held by App8 directly.
Data handling
How your data is handled
We state only what we hold. Your data is encrypted in transit, runs on a trusted cloud, and is handled on a need-to-know basis.
Encrypted in transit
Traffic between your people and App8 is encrypted in transit with TLS 1.2 or higher.
Run on AWS
App8 runs within the security of the Amazon Web Services cloud.
Separate environments
Production runs separately from demo and staging, so live data stays isolated.
Your data is yours
We process your data to run your programs, on a need-to-know basis, and handle it per your agreement.
Access and identity
Who can reach what, controlled
Access follows roles and your identity provider, so the right people reach the right sites and nothing else.
Role-based access
People get the access their role needs, and nothing more.
Multi-site permissions
Site and district staff see only the sites and actions they should.
Single sign-on
SSO with your identity provider, supported case by case, so access follows your directory.
Compliance
Compliance and data handling
We work with your IT, security, and privacy teams during evaluation to meet your data-handling and compliance requirements. The specifics are in our security documentation.
Documentation
Need our security documentation?
App8 shares security and data-handling documentation, including processing details, with qualified buyers during evaluation. Request a demo and we will route it to your team.
Sécurité (français)
La sécurité pour l'approvisionnement en entreprise
La sécurité et la confidentialité de vos données sont nos principales préoccupations. App8 est certifiée PCI DSS niveau 1, le plus haut niveau de la norme de sécurité de l'industrie des cartes de paiement.
- Les communications avec App8 sont chiffrées en transit (TLS 1.2 ou plus récent).
- App8 fonctionne dans la sécurité de l'infonuagique AWS.
- Accès basé sur les rôles, permissions multisites, et authentification unique (SSO) au cas par cas.
- Nous collaborons avec vos équipes TI, sécurité et confidentialité pendant l'évaluation pour répondre à vos exigences de traitement des données.
- Nous partageons notre documentation de sécurité avec les acheteurs qualifiés en cours d'évaluation.
Pour toute question sur la sécurité de vos données, écrivez à support@app8solutions.com.