security

Security is of a particularly high priority for the Sw7 team.  Our users trust us to keep their data secure, private and available whenever they need it.  We take that responsibility seriously. At Sw7, we maintain a security system that prevents all unauthorised access, supports continuous monitoring for potential vulnerabilities and embraces ongoing, proactive improvement to stay on top of the latest security tools and threats.

In Transit

All member data including project names, task names, comments, uploaded files, account information and payment information are sent using industry best practices regarding traffic: Specifically, we use TLS 1.1-1.2 secure channels and support both 128-bit or 256-bit configurations, depending on the browser.

At Rest

Sw7 host their member data with servers in Germany.  Security in this environment is global best practice and GDPR compliant.  We make extensive use of their built-in firewalls to protect your data against unauthorised remote access.

Projects, tasks, comments, account information and payment information are all stored and encrypted at rest.  Encrypting these files adds an additional layer of security.

The data centres undergo annual certifications to ensure they meet the highest standards of physical and virtual security.  

All data included in Microsoft OneDrive, Dropbox and Google Drive remain on those businesses’ servers and are covered by their respective security policies and practices.

Data Reliability

All member data is automatically backed up with the capability to provide point-in-time recovery.  Additionally, Sw7 creates automatic backups on a daily basis.

Account Access

We verify account access through both email/password-based authentication and Google Accounts authentication via oAuth 2.0.

When email/password-based authentication is used, we always store individuals passwords with unique salts to add an extra layer of protection to your account.

Alternatively, OAuth provides a seamless way to create and access your account without Sw7 ever needing to access or store your Google login credentials.

Sw7 Business Admin Controls

Sw7 provides two different member roles and access privileges: admin and user.

Account administrators have access to the central control panel to manage billing information, users and sharing settings.  Access to any shared projects must be granted by the account administrator from the control panel.

Sharing Settings allows the administrator to choose between restricting sharing to within the organisation or allowing sharing outside of the organisation (i.e. with clients, vendors, etc)

Data Privacy

Sw7 makes it a priority to be transparent in how we collect, use and handle your information when you use our website and software.  Please see our full privacy policy for more details.

Revision date: 22 October 2019