The Malbek platform began life with cloud technology in its DNA. Using the latest cloud-ready, secure technology stack, it employs static code analysis tools to detect vulnerabilities and periodic, third-party dynamic vulnerability scans to secure our production environment.
The Malbek platform supports authentication integration via industry standard SAML 2.0. This allows you to manage your own user access, integrating with your corporate authentication as a single sign-on (SSO). This method ensures that you can access connected systems using the same username and password, adhering to your corporate password policy.
The Malbek platform uses Amazon Web Services (AWS), which provides hardened, highly-available Tier IV data centers to ensure server isolation via the virtual private cloud (VPC) and AES-256 data at rest encryption. Additionally, Malbek employs internal and external network penetration testing and vulnerability scanning to ensure that threats are promptly detected and remediated.
Contract documents generated by the Malbek platform are protected when they are at rest or in transit. In addition, Malbek provides configurability to our customers to be able to mark certain portions of data as sensitive to handle it with an additional layer of security.
Malbek’s robust security models make it easy to configure user access, provide actions, and orchestrate processes to fit specific needs. Access controls can be division or role-based as well as instanced-based for even deeper granularity and protection of contracts, contract templates, and master data.
GDPR compliance requires a partnership between Malbek and you, our customer, in the use of our products and services. Malbek provides configurability to add additional layers of security for portions of data that is considered PII sensitive. Malbek complies with GDPR in the delivery of our service to you by revising policies and processes related to the treatment of EU Personal Data for our customers, partners, contractors, and employees.