A/B Smartly Commitment to Information Security

Our Commitment

Protecting A/B Smartly information and reputation is of utmost priority. We value the importance of being transparent about our security posture and how security is embedded into our DNA, since very early days.

We strive to provide our customers with the confidence to choose A/B Smartly as a trusted vendor. To do so, we have implemented an information security management system (ISMS), based on international standards and best practices, and managed by dedicated resources.

A/B Smartly ISMS has been certified against the ISO/IEC 27001:2031 international standard by an independent third-party, in March 2023.

Security Controls

Human Resources

• Mandatory acknowledgement of security policies and periodic security awareness training.

• Formally defined roles and responsibilities related to our information security processes.

• Confidentiality agreements established with all personnel.

Data Protection

• Encryption of all data both in transit, and at rest.

• User access controls including single sign on and mandatory multifactor authentication.

• Logging and monitoring processes and technologies with automated alerting.

Secure Development

• Secure Software Development Lifecycle with a security-by-design approach.

• Code reviews against OWASP Top 10.

Security Testing

• Periodic penetration testing performed by independent third-parties.

• Ongoing vulnerability scans.

Infrastructure Security

• Change management program ensuring all changes are evaluated, tested and formally approved.

• Systems hardening according to industry standards and best practices.

• Centralized endpoint management solution with enforcement of security policies. 

Availability

• Relying on leading cloud services providers which offer highly-available, resilient and redundant infrastructures.

Incident Management

• Formally defined incident management procedures to address incidents which may impact the confidentiality, integrity or availability of our client’s information.

Report Suspected Vulnerabilities

If you found a potential issue which may compromise the security of our products or services, you are welcome to contact us at vulnerability-report@absmartly.com. 

A/B Smartly takes security very seriously, and will investigate all reported vulnerabilities. Kindly consider providing any supporting material (e.g., PoC, tool output) which can contribute to effectively understanding the severity of the vulnerability.