Purpose
How Exterview protects your data and controls access. This page describes posture, not implementation detail.Security posture
Access & authentication
Single sign-on via your identity provider; system access via credentials scoped to your organization.
Role-based access control
Permissions scoped by role. Configure, run, and review are separate.
Encryption
Data encrypted in transit and at rest.
Environment separation
Sandbox and production are isolated from each other.
Data separation
Your data, configuration, and scoring are kept separate from other customers’.
Audit logging
Actions and results are logged for traceability.
At a glance
Certifications
Full status, scope, and evidence access are on the Compliance FAQs page.
Detailed security documentation and current reports are available to customers
and prospects under NDA. Contact your Exterview representative.
FAQs
Is our data isolated from other customers?
Is our data isolated from other customers?
Yes. Your data, configuration, and scoring are kept separate from other customers’.
How is access controlled?
How is access controlled?
Through roles and permissions scoped to your organization, following least
privilege.
Can we get your security documentation?
Can we get your security documentation?
Yes, under NDA. Ask your Exterview representative for the current pack.
Related
Auditability
How access and actions are traced over time.
Compliance FAQs
Certification status and procurement questions.