EASY TO
ASSESS
As of September 4, 2024, Ovrture is being audited for SOC 2 Type 2 compliance by Johanson Group LLP with an anticipated attestation date of December 4, 2024. This initiative is but another example of Ovrture’s unyielding commitment to maintaining the highest standards of security and data protection.
In the interim, we encourage clients and prospective clients to evaluate one or all of the following: our Drata-based trust center, our ProcessUnity page where our demonstrated compliance can be assessed against a myriad of different security frameworks, and/or our Higher Education Community Vendor Assessment Toolkit (HECVAT) that comprehensively captures our security architecture and configuration.
We protect your data
All data is written to multiple disks instantly, backed up daily, and stored in multiple locations. Files that administrators and users upload are stored on servers that use modern techniques to remove bottlenecks and points of failure.
Encrypted in transit & at rest
All communication between your local device and our servers is encrypted in transit using HTTPS. All user data, record data, text, images, documents, and files that you upload to our software are kept in encrypted storage, filesystems, and databases. Even our backups are encrypted.
Maximum software security through minimal design
The platform’s architecture was carefully designed and executed to expose the minimum possible number of access points, thereby ensuring maximum security.
Full redundancy for all major systems
We operate at full redundancy on the Amazon Web Services Cloud. Our systems are engineered to stay up even if multiple servers fail.
Regularly updated infrastructure
Our software infrastructure is updated regularly with the latest security patches. Our platform runs on a cloud infrastructure that is locked down with firewalls and carefully monitored. While perfect security is a moving target, we work with security researchers to keep up with the state of the art in web security for major donor communications software.