{"id":45607,"date":"2024-08-05T13:25:24","date_gmt":"2024-08-05T13:25:24","guid":{"rendered":"https:\/\/www.templafy.com\/?page_id=45607"},"modified":"2026-04-27T12:49:39","modified_gmt":"2026-04-27T12:49:39","slug":"security-and-privacy-faq","status":"publish","type":"page","link":"https:\/\/www.templafy.com\/home\/platform\/security\/security-and-privacy-faq\/","title":{"rendered":"Security and Privacy FAQ"},"content":{"rendered":"\n
\n
\n
\n

Security and Privacy FAQ<\/h1>\n\n\n\n

This FAQ will provide valuable insights into how we deal with Information Security and Privacy at Templafy,
and address commonly asked questions about our application and organizational security measures.<\/p>\n\n\n\n

\n
\n
\n
Request SOC 2 report<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n
\n
<\/div>\n\n\n\n
\n
\n
Breadcrumbs<\/h6>\n<\/div>\n\n\n\n
\n
\n

Security<\/h2>\n\n\n\n
\"\"<\/figure>\n\n\n\n


Application Security<\/h3>\n\n\n\n


Does Templafy conduct penetration testing of its network, infrastructure, and services?<\/h6>\n\n\n\n

Penetration testing is conducted to measure the security posture of Templafy Services and Infrastructure. Templafy has an external penetration test performed at least once per calendar year.<\/p>\n\n\n\n

The objective of those penetration tests is to identify design or functionality issues in Templafy Services that could expose Data or Customers to risks from malicious activities.<\/p>\n\n\n\n

Each external penetration test is performed by an internationally recognized, independent third-party software security testing company.<\/p>\n\n\n\n

Each penetration test: <\/strong><\/p>\n\n\n\n

(i) encompasses both the internal and external network and authenticated application layer,<\/p>\n\n\n\n

(ii) includes at least 80 hours of manual effort by the testing company,<\/p>\n\n\n\n

(iii) probes for weaknesses in network perimeters or other infrastructure elements and any weaknesses in process or technical countermeasures relating to Templafy\u2019s Services that could be exploited by a malicious party, and<\/p>\n\n\n\n

(iv) identifies (at a minimum) the following security vulnerabilities: invalidated or unsanitized input; broken access control; broken authentication and session management; cross\u2010site scripting (XSS) flaws; buffer overflows; injection flaws; improper error handling; insecure storage; denial of service; insecure configuration management; proper use of SSL\/TLS; proper use of encryption; and anti\u2010virus reliability and testing.<\/p>\n\n\n\n


Can customers conduct their own penetration tests?<\/h6>\n\n\n\n

Customer-led penetration testing can be conducted upon request at security@templafy.com and is subject to conditions prior to carrying out the tests.<\/p>\n\n\n\n


Does Templafy conduct vulnerability scanning of its network, infrastructure, and services?<\/h6>\n\n\n\n

Vulnerability scanning is performed on a continuous basis by Templafy in accordance with the vulnerability management policy. Technologies used are:<\/p>\n\n\n\n