Our Security
The foundation of our digital signage is our security. This article will outline the key features of our systems that protect your screens from cyber attacks.
As digital signage systems are often connected to the internet in public areas, reliable security against cyber threats is necessary.
Below is a comprehensive overview of the security measures we take to ensure your screens are protected.
End-To-End Data Encryption
All data is encrypted in transit and at rest using advanced SSL (HTTPS) protocols.
Secure User Access
Our platform supports:
- Single Sign-On (SSO)*: allows users to log in with one central account (like a Google or Microsoft login)
- Multi-Factor Authentication (MFA): multiple layers of login defence
- Role-Based Access Control (RBAC): users can only access information based on their job role – additionally, only authorised users can make changes to signage
*SSO available with enterprise packages
Proof-of-Play & Playback Reporting
A built-in feature which gives timestamped logs of what content played and when.
Offline Mode Support
Media players will continue to play scheduled content regardless of internet connection.
Continuous Monitoring & Threat Protection Measures
We actively monitor our systems through various means:
- Real-time monitoring with Datadog and AWS CloudWatch: these tools watch our platform 24/7 and alert us of any issues
- Biannual third-party penetration testing: biannual ethical hacker pentesting to find and patch vulnerabilities in our systems
- Regular scans with rapid patching: we frequently check our own software and fix weaknesses
- Web Application Firewall (WAF): a filter that blocks common threats e.g. unauthorised attempts to access restricted areas
- DDoS protection and infrastructure hardening via AWS: we protect against Distributed Denial of Service attacks (also known as flooding or bombarding) and reinforce our systems
- Anti-virus protection on critical systems: prevents malware from infecting our servers
Backups & Business Continuity
Even with our strong foundational security, we also protect your content through daily encrypted backups. We also offer rapid restoration capabilities for unprecedented scenarios, and a business continuity plan.
Security Certification & Standards
We are proudly Cyber Essentials Plus (CE+) certified, verifying our protection against common cyber threats.
Additionally, we follow various internationally recognised cybersecurity standards:
- ISO 9001 (Quality Management)
- SOC 2 Type II: a certification that checks how we manage customer data and security over time
- GDPR compliance for handling EU personal data: ensures we follow European privacy laws when handling personal information
- PCI DSS for secure payment data handling: a security standard for handling payment card information
- ISO/IEC certifications via Amazon Web Services (AWS), including: ISO 27001 (Information Security), ISO 27017 (Cloud Security), ISO 27018 (Privacy), ISO 27701 (Privacy Information Management), and ISO 22301 (Business Continuity)
Our Support
If you have any further questions about security, do not hesitate to contact the support team at support@troudigital.com. If you have an enhanced SLA, utilise your dedicated contact number, Slack or Teams channel to get in contact.