Trust center section
Review ISAE 3402 assurance details, ISO 27001 alignment information, and penetration-testing documents.
Public-facing materials covering ISAE 3402, ISO 27001 alignment, and penetration-testing information.
The ISAE 3402 Type II report covers Process Factory's delivery of the Connector Plus platform and the related customer integration layers operated in the same environment, including the general IT controls relevant to confidentiality, integrity, availability, and ISO 27001/2-aligned security requirements.
Truesec assessed Connector Plus against the OWASP Security Testing Framework and relevant best practices, focusing on unauthorized access, privilege and access management, and data segregation. The assessment identified no findings of significant risk and no risks endangering the confidentiality, integrity, or availability of the application.
The ISAE 3402 report states that Process Factory's Information Security Management System is adapted to the organization's context, strategic goals, internal and external challenges, and stakeholder needs. It also describes general IT controls and control testing aligned with ISO 27001/2 guidance, including risk management, organizational, people, physical, and technological controls.