Skip to main content
Scribe maintains strong organizational security practices to protect both company and customer data. Here is an overview of the key controls we have in place.

​
Employee policies

Every employee is required to acknowledge a code of conduct at the time of hire. Employees who violate the code of conduct are subject to disciplinary actions in accordance with our disciplinary policy. We enforce a strict password policy. All passwords for systems and applications within our scope must be configured according to company standards.

​
Device management

Scribe deploys anti malware technology to environments commonly susceptible to malicious attacks. This technology is configured to update routinely, generate logs, and stay installed on all relevant systems. We also use a mobile device management (MDM) system to centrally manage mobile devices that support our service. This allows us to enforce security policies across all company devices.

​
Asset disposal

We follow strict procedures for disposing of electronic media that contains confidential information. All media is purged or destroyed in accordance with best practices, and certificates of destruction are issued for each device destroyed. All of these controls are verified as part of our SOC 2 Type II compliance process. For more details on our certifications, visit our Trust Center.