Detective Desk is certified to the ISO 27001:2013 standard (Information Security Management Systems) for the provision of delivering Software as a Service to Australian businesses for the purposes of skiptracing and investigations on individuals and companies.
Through this certification we provide our clients the confidence of dealing with a compliant, reputable and professional company with a system of internal controls that regularly undergo comprehensive independent auditing processes.
Our ISO certification offers the following advantages:
At Detective Desk, we place a high priority on data sovereignty. That's why we have chosen to house our privately owned servers in two Equinix data centres in Sydney - SY3 as our primary location and SY4 for disaster recovery and backup.
We do not use any cloud service providers and instead rely on our own hardware, which is fully owned and controlled by Detective Desk. This allows us to maintain complete control over our data and ensure that it is always protected and secure.
All of our data resides in internal data storage servers located in Australia and is not routed overseas. We utilise best practice security configurations including;
Power and Cooling
Physical Security
Reliability
Our IBX data centres boast an industry-leading, high average uptime track record of > 99.99% globally.
Certifications
This site is DTA Certified and it is designated as Certified Strategic.
In 2019 we implemented U2F Security for all of our resources when we migrated to the use of USB security keys (Yubico) that follow the U2F protocol. This added layer of protection helps to prevent unauthorised access to a network, even if a data thief has a valid username and password.
By using U2F Security and USB security keys, we can further enhance the security of our resources and protect our clients' sensitive data from potential threats.
Any software downloaded on a computer or phone is vulnerable to malware and hackers. The YubiKey is based on hardware with the authentication secret stored on a separate secure chip built into the YubiKey.
We also upgraded our network infrastructure by increasing the capacity of the connection between our data centers to 100Gbit.
In 2021 we engaged the services of SecurityFootprint to perform penetration testing on our system. This is an essential step in ensuring that our system is as secure as possible and is an important part of our regular security review process.
By enlisting the help of a third-party security expert, we are able to conduct a thorough and comprehensive security check to identify any potential vulnerabilities and take steps to address them. This third-party security check allows us to maintain a mature security environment.
In 2022 we enhanced our existing security framework with CloudFlare to add an additional layer of protection against potential DDOS attacks and safeguard our data. This move was designed to ensure that our system is as secure as possible and to provide our clients with the peace of mind that their data is being protected at all times.
We are proud to have successfully met the requirements for ISO 27001:2013 and were issued with our digital certificate in mid-2022. We believe that it is important to stay ahead of the curve when it comes to security and are always looking for ways to improve and strengthen our defences.
