Ensuring the safety of designer’s data and IP at Programa
Josh Oxlee, 7 Mar 2023
At Programa, we understand that interior designers put a lot of effort into creating beautiful spaces. That’s why we go to great lengths to ensure that our software employs the latest security measures to protect your data and IP.
Data Encryption in Transit and at Rest
At Programa, we use the latest encryption technologies to protect your data and IP from unauthorised access in transit (from the user’s web browser to our servers) and at rest (in our database). All data is encrypted using the industry-standard AES-256 encryption algorithm. This means your data is never travelling between your device and our servers or stored in our servers in a form that a malicious third party can readily access.
We have multiple security controls to prevent unauthorised access to your data. These include network isolation, application-layer threat prevention, and security group access control. Put simply, if a single security control fails, these additional measures provide additional redundancy and ensure that your data remains secure at all times.
Multi-Factor Authentication (MFA)
All access to Programa servers is protected by multi-factor authentication (MFA). This means that any attempt to log in without an appropriate security token will be unsuccessful and will provide a notification to our team.
Monitoring and Breach Protocols
We employ Amazon GuardDuty, which uses machine learning and external threat intelligence sources to detect anomalies or potential threats on our system. Additionally, all AWS activity is available in real-time and recorded with a full audit trail that can be used to assess any security incidents. Should we ever experience an external breach, we have protocols for notifying affected users of the incident and its cause.
Your IP is Yours, Forever
Your account, projects and IP are only available to you and any team members you add to your account. In the event that a Programa team member needs to access your account for troubleshooting or assistance, they can only do so with explicit permission.