Security & Compliance

CoreView Is Serious About Your M365 Tenant Security

ISO 27001 & ISO 27018

We take great pride in ensuring we have the appropriate certifications to meet international standards. With our ISO 27001 and ISO 27018 certifications, we provide extra peace of mind to our customers around their data. With this certificate, we are proud to provide proof CoreView has the necessary know-how for protecting data.

SOC 2, Type II

System and Organization Controls (SOC) is a widely recognized standard for ensuring transparency and confidence in security posture. CoreView is regularly audited by a third party, and we maintain SOC 2 Type II compliance.

Microsoft Preferred Solution & Gold Partner

Holding this title means Microsoft widely recognizes the partner based on various security and business requirements.

Going the Extra Mile

Authentication and Access Controls

CoreView's core operating principles of "least-privilege" or "need-to-know", so we limit access to crucial information and, in turn, protect your tenant
Block unauthorized user access through multi-factor authentication

Encryption

We approach situations with a "think securely" mindset with encryption as an integral role in the strategy
We require encryption methodology when interacting with external networks – making sure your data stays secure

Vulnerability Management

Ongoing and continuous monitoring of virtual machines, networks, and services throughAzure Security Center, Microsoft Defender, and CoreView
Static code analysis is part of the Continuous Integration process
Code quality ensured through constant pull request process performed by a dedicated set of senior software engineers

System Management

CoreView maintains the highest standards and processes and ensures information security is an integral part of the entire lifecycle

Patching and Upgrades

We act fast when a patch or upgrade is required. First, we evaluate, then determine the corrective course, and then test repeatedly to ensure it is resolved
We configure the testing environment to replicate the production environment to ensure accuracy before pushing it to production

Employee Training

We are committed to conducting business in a legal, ethical, and responsible manner. To ensure we maintain our standards, we implement the following practices:

Mandated annual security and compliance training
Background checks during hiring
End-user computers protected with Microsoft Intune, DLP, Microsoft Defender, and Firewalls

Disclosure Responsibility

If you have discovered a vulnerability in a CoreView application, please submit a report to us through a support ticket. We review all submitted security concerns, and we strive to stay aware of the latest security developments by monitoring the threat landscape and working with external security researchers and companies.

If you believe your account has been compromised or you see suspicious activity on your account, please report it to your application administrator and support@coreview.com.

CoreView Security OverView