Security

How TrackRecords protects access, data in transit and data at rest

Overview

TrackRecords is built for investment teams that process portfolio holdings, transactions and risk results. Access is limited to authorised users. Administrative functions are separated from the working terminal.

Encryption

  • Traffic uses HTTPS.
  • The public service scores A+ on SSL Labs.

Authentication and access

  • Sign-in is protected by two-factor authentication over email.
  • Users have roles and permissions.
  • The database is reachable only on the private network, not from the public internet.

Operations

  • Operating systems, web servers, databases and libraries are patched on a regular schedule.
  • Monitoring is in place to detect anomalies and respond to incidents.
  • Backups are taken regularly so data can be restored after a failure.

Cloud editions

Cloud editions run in a certified cloud environment. Dedicated cloud and on-premises deployments keep the same application controls and add isolation or local hosting where the organisation requires it.