Questions on Security, Reliability, Data Protection, and Integration
How is vulnerability, patch, and security updates management ensured?
Are the network connections and interfaces to amaise established and do they meet the required performance and security features?
How do technical administrators at amaise access the infrastructure and systems? What methods are used for this purpose?
How can it be ensured that only authorized devices can access the service (e.g., customer IDP, IP whitelisting)?
Does amaise have a requirements-compliant security monitoring system with defined interfaces (e.g., APIs, etc.), and is security incident reporting ensured according to customer requirements?
Are additional extensions or plugins used?
How are endpoints mutually authenticated in machine-to-machine communication?
How is malware protection ensured?
How does key management work?
How is the tenant service ensured?
At which service provider does amaise operate its infrastructure?
What certifications and evidence documentation for attesting security are available?
Specification of RTO and RPO
How is authentication and authorization accomplished?
Is it ensured that no licensing rights are violated by using the cloud service?
How does amaise ensure identity management and authentication?
Multi-tenant architecture: What does it mean?
How does the architecture of the amaise cloud platform look?
How do we ensure security in the data center?
How are security controls ensured?
What does amaise's cloud infrastructure look like?
How is the separation of customer workspaces ensured?
Is there a mandatory archiving requirement for outsourced data? If so, what is the retention period and in what form must the data be stored?
How does amaise ensure data protection?
How is the data encrypted?
Is the service (including data processing and storage) provided in a country with sufficient data protection? If so, in which country?
How is data backup handled at amaise?
Who is the contracting party?
Can the application (including administration) be fully utilized through a browser? Which browsers are supported?
What does the integration of amaise look like after a successful pilot project?
Are connections to other systems necessary? If yes, which systems and using which protocols?
What are the contractual agreements with amaise?
Can the IAM system of a customer be used by amaise for the central management of accounts, roles, and permissions?