Access Governance

Security, Privacy & Compliance at Avatier

A Message from Our CISO

In the dynamic tech landscape, security is foundational – it’s about enabling our customers to thrive securely. As Avatier’s CISO, I believe security must accelerate your business, not impede it.

Our approach is proactive, leveraging cutting-edge solutions to ensure the confidentiality, integrity, and availability of your critical assets. We’re constantly evolving our defenses, from advanced threat detection to robust identity and access management.

Compliance and certification are core to our commitment. We rigorously adhere to leading frameworks like ISO 27001, NIST 800-53, SOC 2, and the Cloud Security Alliance. These aren’t just checkboxes; they’re living principles driving continuous independent evaluations and internal assessments, ensuring our security posture remains ahead of the curve.

At Avatier, security, privacy, and compliance are woven into our culture. I invite you to explore how our comprehensive framework can empower your organization to innovate with confidence. We’re also continuously expanding our global compliance efforts. For any questions, please contact our team. Your interest in Avatier’s program is highly valued.

 

All the best,

Dr. Sam Wertheim

Chief Information Security Officer

Certifications & Affiliations

Avatier has used the SOC 2, Type I and Type II processes to successfully audit the operational and security processes of our service and our company Current customers can search for “SOC” on support.avatier.com.

The Cloud Security Alliance (CSA) is the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment.

Avatier has achieved ISO 27001:2013 Certification, attesting to the commitment of Avatier’s leadership to a secure service for our customers.

To better serve the highly-regulated and security-conscious healthcare industry, we’ve established a HIPAA Compliant Service instance.

Avatier has an official authorized status with the Federal Risk and Authorization Management Program (FedRAMP) Moderate authority to operate (ATO).

Avatier is a proud San Francisco Bay Area InfraGard Members Alliance Partner. The San Francisco Bay Area InfraGard Chapter is one of 77 chapters in the FBI’s InfraGard network and a member of the InfraGard National Members Alliance.

ICIT Fellow Program Members are an elite group of global leaders who sponsor initiatives including research, briefings, webinars, and executive roundtables that directly support ICIT’s mission and provide education to the cybersecurity, business, and national security communities.

The IDSA collaborates to bring awareness to the security challenges addressed through identity-centric security and provides thought leadership, education and vendor neutral implementation guidance.

The PCI Security Standards Council’s mission is to enhance global payment account data security by developing standards and supporting services that drive education, awareness, and effective implementation by stakeholders.

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software

The National Institute of Standards and Technology is a physical sciences laboratory and a non-regulatory agency of the United States Department of Commerce. Its mission is to promote innovation and industrial competitiveness.