Plaky
Project and task management
Clockify
Time and cost tracking
Pumble
Team communication and collaboration
Powered by
By team
By organization size
By workflow
At Plaky, we secure and protect the information of milions of users worldwide with transparency and 24/7 support.
ISO/IEC 27001:2013
The most rigorous global security standard for Information Security Management Systems.
SOC 2 Type II
Annual audit certification for Service Organization Controls Trust Services Principles.
GDPR
Rules for the protection of personal data and privacy inside the European Union.
Our top priority is customer integrity and we would never do anything with your data that we wouldn't be proud to tell the world about. Client's data protection complies with SOC 2 standards to encrypt data in transit and at rest, ensuring customer and company data and sensitive information is protected at all times.
Physical location of Plaky data is Frankfurt, Germany.
All Plaky data is hosted on Amazon Web Services (AWS).
AWS maintains an impressive list of reports, certifications, and independent assessments to ensure complete and ongoing state-of-the-art data center security. They have many years of experience in designing, constructing, and operating large-scale data centers, which makes them the industry standard when it comes to security.
We don't publicize exactly what features, services, and data center we use for security reasons, but we can give you a brief overview of how we make sure your data is safe. We recommend you also review our Terms of Use and Privacy Policy.
Plaky's data is hosted in the AWS EU-Central region (Frankfurt). Additionally, data centers are secured with a variety of physical controls to prevent unauthorized access.
All Plaky servers are run from their own virtual private clouds (VPCs), with rules that prevent unauthorized requests from entering our network.
Plaky infrastructure is hosted in a fully redundant, secure VPN environment, with access restricted to operations support staff only. This way we can leverage complete firewall protection, private IP addresses, and other security features.
The whole system on which Plaky runs is behind a firewall and only the necessary ports are open to the outside network. Also, only authorized personnel, using SSH keys, have access to the system. Access is enabled only over a VPN connection.
All data to and from Plaky is sent securely over HTTPS. The initial connection is established over 2048 bit TLS, and the rest of the communication happens over 256 bit SSL. This is the standard technology for keeping an internet connection secure and prevents unauthorized persons from reading and modifying any information. Any data transferred between a user and Plaky is impossible to read or modify.
We use the same level of encryption as do banks and financial institutions. All data is encrypted using SHA256withRSA algorithms, which scramble data in transit, preventing hackers from reading it.
Your company-specific data inside Plaky is kept separate through a logical separation at the data tier, based on application-level access permissions and roles you set up in your workspaces.
All Plaky data is encrypted at rest. At-rest encryption means that all our databases, files, and other storages of content have their files encrypted when they're backed up or otherwise sitting idle. If someone was somehow able to get ahold of a backup of the database, it'd be useless, because they wouldn't have the key to decrypt it.
Our system is constantly monitored. We get reports in real time so we can instantly react in case a potential issue arises. All actions taken on production consoles are logged.
We constantly monitor security, performance, and availability 24/7/365. We run automated security testing on an ongoing basis. We prioritize, resolve, and deploy discovered security issues quickly after discovery. Because we follow Continuous Delivery and Deployment best practices, we can update Plaky on a daily basis and fix things as soon as we see them.
We never access your data in Plaky, unless required for support reasons and with your explicit permission. We implement role-based access controls and the principles of least privileged access, and review revoke access as needed.
CAKE.com Inc. takes the security of its data and that of its clients and customers seriously and ensures that only vetted personnel are given access to their resources.
— All CAKE.com Inc. contractors and employees undergo background checks prior to being engaged or employed by us in accordance with local laws and industry best practices.
— Confidentiality or other types of Non-Disclosure Agreements (NDAs) are signed by all employees, contractors, and others who have a need to access sensitive or internal information.
— We embed the culture of security into our business by conducting employee security training & testing using current and emerging techniques and attack vectors.
— All development projects at CAKE.com Inc., including on-premises software products, support services, and our own Digital Identity Cloud offerings follow secure development lifecycle principles.
— All development of new products, tools, and services, and major changes to existing ones, undergo a design review to ensure security requirements are incorporated into proposed development.
— All team members that are regularly involved in any system development undergo annual secure development training in coding or scripting languages that they work with as well as any other relevant training.
— Software development is conducted in line with OWASP Top 10 recommendations for web application security.
CAKE.com Inc. deploys third party penetration testing and vulnerability scanning of all production and Internet facing systems on a regular basis.
— All new systems and services are scanned prior to being deployed to production.
— We perform penetration testing both by internal security engineers and external penetration testing companies on new systems and products or major changes to existing systems, services, and products to ensure a comprehensive and real-world view of our products & environment from multiple perspectives.
— We perform static and dynamic software application security testing of all code, including open source libraries, as part of our software development process.
CAKE.com Inc. is committed to providing secure products and services to safely and easily manage billions of digital identities across the globe. Our external certifications provide independent assurance of CAKE.com Inc.'s dedication to protecting our customers by regularly assessing and validating the protections and effective security practices CAKE.com Inc. has in place.
CAKE.com Inc. is ISO/IEC 27001:2014 certified. ISO is the most rigorous global security standard for Information Security Management Systems (ISMS).
CAKE.com undergoes an annual SOC 2 Type II audit, which demonstrates our commitment to meeting the most rigorous security, availability, and confidentiality standards in the industry.
Our continued SOC 2 certification ensures our organizational and technology controls are independently audited at least annually. It verifies that CAKE.com's security controls are in accordance with the AICPA Trust Services Principles and Criteria. CAKE.com's service is hosted on AWS, which also holds a SOC 2 Type II report.
CAKE.com's SOC 2 Type II report is available upon request.