Secure and Compliant DAM Software

Run by our dedicated in-house infrastructure experts, on industry-leading Amazon Web Services infrastructure.

Both Amazon Web Services (AWS) and Asset Bank DAM are certified to ISO27001:2022, so you can trust your assets are in safe hands.

Secure and compliant digital asset management

Asset Bank Security Features

Global Reach

We have datacentres in the EU, US, CA, ME, AP and AUS so you can choose the region most suited to your requirements.

Data protection

Our practices are fully in line with EU GDPR regulations, and so are our suppliers which we use to help deliver Asset Bank to you.

ISO 27001:22

As an ISO 27001:2022 accredited company, we have the controls in place to effectively manage your assets using the three pillars of data protection - confidentiality, integrity and availability.

Confidentiality

Asset Bank’s security is baked in right from the initial designs of any new features. Our developers are trained in secure coding practices, and our secure development lifecycle policies ensure that testing and peer reviews are carried out on all changes made to the product. We also use an ongoing program of automated vulnerability scanning and manual penetration testing from an accredited third-party.

Integrity

Our hosting partner, AWS, is a world leading provider of cloud servers and storage, renowned for their comprehensive compliance suite. Your digital assets are stored in AWS S3, which stores data with a redundancy rate of 99.999999999%.

Availability

Asset Bank’s cloud hosting means that resources scale as you need them, so you can store as much data as you need to without having to worry about disk space. Our service uptime SLA is 99.9%, and our scheduled maintenance windows are all in the middle of the night, for the region in which your application is installed.

Expertise

Our dedicated in-house infrastructure experts support the entire platform, resulting in one less application for your IT Team to worry about, and gaining you access to qualified, skilled support.

Cloud Hosting Details

Physical Security

AWS’s physical security measures at their datacentres are some of the best in the world. CCTV, intrusion detection, redundancy, fire detection and suppression, and leakage detection to name a few. More detail can be seen on their website.

Network Security

Access to any technical system at Asset Bank is granted in line with our ISO-compliant access control policies, utilising roles-based access and the principle of least privilege. To gain access to our AWS cloud environment the connection must be made from our own IP address using a secure, encrypted tunnel. And in a world of hybrid working, our VPN is managed so that only approved devices may access our networks.

Encryption

When you access Asset Bank through your web browser, you will be using an encrypted HTTPS connection so that your activity can’t be snooped upon. Our certificates use Let’s Encrypt to automatically re-issue expiring certs, and you can choose a custom domain for your app too.Your digital assets, stored in AWS S3, and the metadata in the database is encrypted at rest, this means that even if your data was compromised in any way, it would not be readable by the threat actor. All backups are also encrypted in transit and at rest.

Backups

Even with AWS’s excellent record of data redundancy in S3 we use an entirely different set of S3 buckets to store your backups. Any asset that you upload to Asset Bank will be instantly replicated to this secondary bucket where it will be safely stored until 90 days after you remove the original asset from Asset Bank. Our comprehensive disaster recovery strategy also means that database and application backups are taken regularly so that we can restore your entire application with a Recovery Point Objective (RPO) of, maximum, twelve hours.

Business continuity

Our Asset Bank security management team is trained in, and tests, our ISO-compliant business continuity plan to make sure that in the event of a disaster, we are able to resume our service as soon as possible. But with your data in AWS and our distributed workforce, we’re minimising the risk of any one event affecting our service in any way.

Personnel

Our dedicated in-house infrastructure experts support the entire platform, resulting in one less application for your IT Team to worry about, and gaining you access to qualified, skilled support.

For More Information:

Dedicated DAM Hosting

If you have bespoke security requirements we understand that you might want to host Asset Bank on a dedicated server.

We partner with AWS to provide fully backed up EC2 virtual servers, which we fully manage for you.

For More Information:

Security Vulnerability Management and Disclosure Policy

Asset Bank is committed to fixing serious security vulnerabilities promptly and carefully.

In order to protect our customers, we require that vulnerabilities be disclosed responsibly and reported to us in confidence. Vulnerabilities should not be disclosed publicly before we have investigated them and, if necessary, released a fix.

How to Report a Security Issue

Please email support@assetbank.co.uk.

Please provide enough detail to allow us to reproduce and investigate the issue quickly, including:

Step by step instructions to reproduce the issue
Affected version
Affected configuration (e.g. operating system, browser, other software involved, settings)

Our response

When we receive a vulnerability report we will:

Acknowledge receipt of the vulnerability report.
Investigate the report.
If necessary, develop a fix for the vulnerability.
When security fixes are released, notify subscribers to our security mailing list.