Sift Trust & Security

Sift ensures reliability, compliance, and the highest standards of data protection. Below is an overview of our security measures.

Infrastructure Security

Sift restricts access to production systems and data to authorized personnel using unique credentials, multi-factor authentication, and encrypted connections. Network segmentation, firewalls, and strict access controls protect customer data, with clear procedures for onboarding, revoking access, and ensuring compliance. For more information, contact Sift directly.

Organizational Security

Sift enforces security through background checks, annual training, asset inventories, and mobile device management. Visitor procedures and secure media disposal are standard, with anti-malware protections and password policies ensuring compliance.

Product Security

Sift ensures product security through encryption of sensitive data at rest and in transit, regular penetration testing, and continuous vulnerability management. Annual control assessments and system monitoring ensure policies are effective and updated as needed.

Internal Security Procedures

Sift has internal security measures in place, including Business Continuity and Disaster Recovery plans, risk assessments, and vendor management programs. Change management, configuration consistency, and a formal development lifecycle ensure operational stability, while access to sensitive systems and data centers is tightly controlled and reviewed regularly. Incident response plans are documented, tested annually, and communicated effectively, alongside policies for vulnerability management and risk mitigation.

Data and Privacy

Sift upholds strict data retention and classification policies to safeguard customer information. Data is securely retained and disposed of according to formal procedures, while a classification policy ensures confidential data is protected and accessible only to authorized personnel.