SUPRA´s physical infrastructure is based on Heroku´s (Salesforce) technology, hosted and managed within Amazon’s secure data centers and utilize the Amazon Web Service (AWS) technology. Amazon continually manages risk and undergoes recurring assessments to ensure compliance with industry standards. Amazon’s data center operations have been accredited under:
SOC 1 and SOC 2/SSAE 16/ISAE 3402 (Previously SAS 70 Type II)
PCI Level 1
PCI compliant payment processor Braintree is used for encrypting and processing credit card payments. Heroku’s infrastructure provider is PCI Level 1 compliant.
As a publicly traded company in the United States, salesforce.com is audited annually and remains in compliance with the Sarbanes-Oxley (SOX) Act of 2002.