Your data is safe with us
Mevisio uses industry standards and best practices for data management and security.
Security at Mevisio
Security is built into every layer of our platform, combining best practices, certifications, and continuous monitoring to keep your data safe.
Security by design
Secure software
Mevisio is designed to be secure from the ground up, having security top of mind in our product development.
ISO 27001
Our information security management system is certified compliant to the international standard.
Security First
At Mevisio, security isn't an afterthought; it's at the core of everything we do. From design decisions to supplier selections, we are committed to delivering a secure and reliable service for our customers.
The Mevisio platform is hosted on Amazon Web Services (AWS), in the EU or the US, with a separate environment for each region. AWS is designed to meet the rigorous security standards of global banks and other high-sensitivity industries, and backs the platform with its own security, compliance, and governance tools.
All communication between clients and servers is encrypted with TLS 1.2 or later, and plain HTTP is redirected to HTTPS, so no data is ever transmitted unencrypted. This prevents unauthorized access during transmission.
All data is encrypted with AES-256 when stored, making it unreadable even if someone were to gain physical access to the servers. Additionally, passwords are securely hashed with bcrypt and never stored in plain text—aligning with best practices to keep your information safe.
- HostingAWS, EU or US
- In transitTLS 1.2 or later
- At restAES-256
- PasswordsHashed with bcrypt
Sign-in and access
Your administrators decide who signs in, how, and what each person can see and change.
Single sign-on
Sign in with SAML 2.0 or Microsoft Entra ID, with groups from your identity provider mapped to groups in Mevisio.
Multi-factor authentication
Codes by email or from an authenticator app, with backup codes. Each account sets the level of MFA it requires.
Password rules
Passwords are at least 12 characters, weak passwords are rejected, and recent passwords can't be reused.
IP allowlists
Limit access to your own networks, for the whole account or for a single sandbox.
Permissions
User types and groups decide who can see and change what. Sandboxes let you try changes away from the live account.
API and AI access
Endpoints answer only to API keys you issue. AI access is off until an administrator turns it on, separately for reading and changing data and configuration, and AI tools sign in with OAuth 2.0.
Encryption & Data Protection
Compliance
Our information security management system is certified compliant with the international standard ISO 27001.
External Assessment
The platform has been externally assessed by a leading cyber security firm and put through penetration test and source code analysis.
Monitoring
Availability is monitored around the clock, with a public status page. Errors raise alerts, and a web application firewall filters malicious traffic before it reaches the platform.
Backup
Databases are backed up automatically, and uploaded files are copied to a backup in another region, to prevent unintended loss of data.
Activity log
Sign-ins, password changes, configuration and data changes, API calls and AI connections are recorded in the activity log, so past events can be traced.
Incident Management
All security related incidents are handled with top priority following our internal procedures.
Book a demo
Book a personalized one-on-one demo of our platform and discover how Mevisio can help you create custom boards, streamline your business operations, and empower your team to work more efficiently.
Prefer to try it yourself?
Start a free trialRather talk to us first?Contact us
Pick a time that suits you
Choose a day and a time in our calendar, and the demo is booked.
Book a demo