Security
Built to pass your IT and procurement review.
Nextvoyage meets your IT and procurement teams' security requirements. We protect your data across access, encryption, vulnerability management, incident response, and continuity, and are happy to share the full Technical Security Assurance during our commercial process.
Access and Identity
- Nextvoyage uses Microsoft for identity and access management; we never store user passwords
- Microsoft Identity adhers to your organization's multi-factor authentication, session rules, and sign-in policy
- Disabling a user in your directory ends their access at once
- Within the Nextvoyage platform, separate the users that create records from those that approve them, through roles
- Nextvoyage integrates with your organization's identity provider to ensure similarly consistent access controls to partners and integrations as well
Encryption
- Your data is encrypted both in transit and at rest, ensuring confidentiality and integrity
- Nextvoyage leverages industry-standard encryption protocols and practices such as rotating keys and certificates
Vulnerability and Patch Management
- We build on managed cloud services that the provider patches on its own schedule
- We scan dependencies in every build and block a release on a critical finding
- We commission regular independent penetration tests and share the summary under agreement
- We remediate findings on set timelines, by severity
Incident Response and Breach Notification
- We run a documented incident response process, owned by senior leadership
- We notify your security contact without undue delay
- We help you meet your own regulatory obligations
Business Continuity
- We replicate your data across separate geographic regions
- We back up your data automatically, with point-in-time restore
- We test failover against measured recovery objectives
Compliance
- We act as a data processor under a Data Processing Agreement
- We adhere to the GDPR and meet Singapore PDPA obligations
- We maintain a current sub-processor register, available on request
Request the security pack
Write to security@nextvoyage.app and we will share the Technical Security Assurance under agreement.