Whether you’re in a highly regulated industry or simply looking for peace-of-mind security, Crownpeak has you covered. The Crownpeak Digital Experience platform meets the highest industry standards for security and regulatory compliance. Your organization will benefit from industry-leading security and data protection of Amazon Web Services – but we don’t stop there. You're further protected through layers of independent certifications and audits, along with the inherent security benefits of our decoupled architecture. This combination delivers the strongest security possible for your organization.
The Crownpeak hybrid-headless CMS is built on Amazon Web Services (AWS). That means you benefit from the robust security and compliance protections provided by AWS.
Crownpeak is a member of the Amazon Partner Network (APN) and has achieved the Digital Customer Experience Competency. To receive this designation, APN Partners must possess deep AWS expertise and deliver solutions seamlessly on AWS.
Sean Brasher, Sr. Director Web Technology, Healthgrades
We support our deep commitment to protecting customers with an extensive program of operational controls and information security practices. Crownpeak participates in a set of industry-leading independent audits, assessments, and certifications to ensure we continually exceed customers’ security needs, including:
AICPA SOC 2® Type 2 is an internal controls audit and report outlining how a company safeguards its customers' data and how effective its controls are. It is often used by companies evaluating cloud service providers to assess risk. The SOC 2 report provides detailed information and assurance about the controls in place relevant to security, availability, processing integrity, confidentiality, and privacy.
ISAE (International Standards on Assurance Engagement) 3000 refers to the standards used during the SOC (system and organizational controls) 2 audit and report. Using the international standards ensures the SOC report can be used by organizations globally.
In order to demonstrate an adequate level of protection for cross-border data transfers under GDPR, Crownpeak maintains EU-US & Swiss-US Privacy Shield certifications.
In order to demonstrate an adequate level of protection for cross-border data transfers under GDPR, Crownpeak maintains EU-US & Swiss-US Privacy Shield certifications.
The Better Business Bureau provides exceptional expertise in data privacy regulations and is the most trusted name in consumer dispute resolution.
The ISO 27001 certification is an international standard that certifies the management framework which Crownpeak adheres to for implementing an ISMS (information security management system) to ensure confidentiality, integrity, and availability of all corporate data which is in place and operating per the ISO 27001 required standard.
The Crowpeak Digital Experience Platform has a decoupled content deployment architecture, which means that content management is separated from content delivery. This greatly reduces the public exposure of the platform and resulting security risks. For example, administrative functions and non-live content (e.g., Stage, Dev, Draft, etc.) are not exposed publicly. With other solutions, the software that renders the live website also typically manages all content – even pre-production – increasing exposure and vulnerability. With Crownpeak, public-facing digital experiences can be built in a lightweight, security-focused manner, totally disconnected from the content repository, rather than having to expose an entire CMS application.
In addition to regular external/third-party security checks, we allow any customer to vulnerability and penetration test the Crownpeak platform at any time. Our SaaS architecture and regular release process means that all customers automatically benefit from the resulting security patches.
