iGrad/Enrich Security

Data Security

iGrad encrypts data at rest and in transit for all our users.  We use tools like Azure Key Vault to manage encryption keys in line with industry best practices.

Application Security

iGrad engages A-LIGN to perform annual third-party penetration tests.  Penetration testers evaluate the source code, running application, and the deployed environment.

iGrad also uses high-quality static analysis tooling provided by SonarCloud and Azure DevOps to secure our product at every step of the development process.

Infrastructure Security

iGrad uses Microsoft Azure to host our application. We make full use of the security products embedded within the Azure ecosystem including Microsoft Defender for Cloud, Azure Active Directory RBAC and secure VPNs

Request Reports

If you would like to request copies of our SOC2 Type2, Pen Tests, Vulnerability Tests or other policies please email us at security@igrad.com