BUSINESS PERSONAL COMPANY Our story Offices Partner Security Careers Contact TRUPHONE SECURITY SECURE BY DESIGN Discover how Truphone's systems adhere to industry-standard security protocols. Application security Truphone internal application development is supported by guidance during the systems development life cycle (SDLC) and by following base security principals, including confidentiality, integrity and availability. Our development is reviewed and evaluated in accordance with OWASP Top 10 Web Vulnerabilities. Third party security Truphone suppliers are selected based on the quality services and security guarantees provided, and must be aligned with Truphone's own standards and vision. Our suppliers are periodically assessed and monitored according to quality KPIs and SLAs. Infrastructure security Our infrastructure is composed of facilities, systems, sites, information, people, networks and processes. Each component is reliant on strong measures and security practices. This allows Truphone to insure integrity and availability in all services delivered to our customers. The implemented security measures follow CIS Top 20, and these are aligned with ISO/IEC 27001:2013, security controls. CYBER SECURITY OPERATIONS Truphone has created a Computer Security Incident Response Team (CSIRT) that responds and proactively monitors information security incidents. Our CSIRT is an accredited member of the Portuguese National CSIRT Network. LEARN MORE CONTACT US Data Center Compliance Truphone's core systems and applications are hosted in several secure and certified data centres across the globe. These data centres are layered with operational and security controls, following all requirements for Tier 3 Certification. Our data centres have been accredited under the most demanding and relevant security standards, such as ISO 27001, ISO 22301, SOC 1, SOC 2, SOC 3, PCI and FIPS 140-2. Additionally, Truphone has built private cages within the hosting data centres to further protect our customer's information, meeting the highest demands for physical security. GDPR General Data Protection Regulation At Truphone we are committed to maintaining the privacy and security of the data we hold for you. Truphone takes complying with the General Data Protection Regulation (GDPR) seriously, so that your customers’ data is processed lawfully, fairly and in a transparent manner. You can request your Individual Right to be executed by emailing dataprotection@truphone.com. PRIVACY POLICY REPORT A BREACH PRODUCTS Truphone for Business Truphone for Finance Truphone for Telecoms Truphone for Things Truphone Connect TECHNOLOGY Truphone Technology eSIM Bootstrap Remote eSIM provisioning Entitlements Global connectivity RESOURCES Newsroom Events Content hub IoT docs Connect docs RSP Docs Entitlements Docs COMPANY Our story Offices Partners Security Careers Modern Slavery Statement Sitemap LEGAL All legal Terms & conditions Privacy policy United Kingdom © 2021 Truphone Limited (4187081). All rights reserved. Registered in England and Wales. Registered address 25 Canada Square, London E14 5LQ. VAT GB851527819.