Security + Privacy

Security and privacy are at the center of everything we do.

To meet stringent security needs required by our customers, Pulselight implements policies, procedures, and security controls to comply with leading certifications, including, but not limited to:

• NIST 800-53 revision 4
• StateRAMP
• FISMA
• HIPAA
• MARS-E
• State information security standards
• FERPA

Pulselight employs a defense-in-depth strategy that leverages multiple security measures to protect the system and customer data. This strategy includes deploying and using:

• SAML 2.0 integration to enable secure single-sign on (SSO)
• AES-256 symmetric key encryption
• TLS v1.2+
• Network firewalls
• Web application firewalls
• VPN
• Real-time system monitoring
• Security information and event management
• Role-based access controls
• Codebase static security scans
• Network and system vulnerability scans
• Antivirus and file integrity monitoring
• Intrusion prevention against brute-force attacks
• Third-party application penetration testing
• Third-party security controls assessment
• Staff security and awareness training