Infrastructure security

Learn how Scribe protects your data with access controls, authentication, monitoring, logging, and network protection as part of SOC 2 Type II compliance.

Scribe takes infrastructure security seriously. We implement strict controls to ensure that only authorized users can access our systems, networks, and data. Below is an overview of the measures we have in place.

Access control

We restrict privileged access to all critical systems, including databases, firewalls, operating systems, and the production network. Only authorized users with a verified business need can access these resources.

Access to our production applications is limited strictly to authorized personnel. This ensures that no unauthorized individual can interact with live systems or customer data.

Authentication

All access to systems and applications requires unique credentials. We enforce the use of unique usernames combined with passwords or authorized Secure Socket Shell (SSH) keys. This applies to both application access and production network authentication.

Remote access to our production systems is only available through an approved encrypted connection, ensuring that data remains protected even when accessed from outside the office.

Monitoring and logging

We use a log management tool to identify events that may impact our ability to achieve security objectives. This helps us detect and respond to potential threats quickly.

An infrastructure monitoring tool is also in place. It watches over our systems, infrastructure, and performance around the clock and generates alerts when specific predefined thresholds are met.

Network protection

Scribe uses firewalls configured to prevent unauthorized access. Our network and system hardening standards are documented, based on industry best practices, and reviewed at least annually to ensure they stay current.

All of these controls are verified as part of our SOC 2 Type II compliance process. For more details on our certifications, visit our Trust Center.