Hardware and infrastructure
· W2 is a cloud-based business.
· We use Microsoft Azure Data centres.
· We use industry leading cloud-based solutions including the likes of Office 365 & Salesforce.
· The W2 Data Centres are Geo-dispersed.
· We use near real time secure data replication and encryption as a standard.
· Our Business Continuity Planning (BCP) and Disaster Recovery (DR) testing continues to be in line with ISO 27001 standards.
· We use professional and commercial grade firewalls throughout out network.
System, Operations & Applications
· We maintain physically and logically separated networks.
· We use Multi-Factor Authentication (MFA) and VPN access.
· We use professional Anti-Intrusion detection and prevention tools.
· Anti-malware software is integrated throughout our systems infrastructure.
· We regularly conduct 3rd party penetration tests.
· We maintain encryption in transit and at rest using standards such as HTTPS and Advanced Encryption Standard (AES) 256-bit encryption.
· We have role-based access used across all systems.
W2 welcome all forms for responsible disclosure. This includes any vulnerabilities found on any of our products or services. You can contact our security team by emailing bug reports to firstname.lastname@example.org.