SPECTRA Trust Center
Held to the standard we certify
SPECTRA verifies the security of managed service providers (MSPs) and works with broker partners to help them get better cyber insurance. MSPs trust us with detailed evidence of how they protect their business and their clients. That's why we hold our own security to the same standard we ask of every MSP we certify.
Verified certification
Independent certification confirms the strength and maturity of our security program.
ISO 27001
SPECTRA's information security management system is certified to ISO/IEC 27001:2022, the international standard for information security. It covers our people, processes and technology, and it includes continual risk management.
Security built into every layer
PRISM and the systems behind it are secure by design. Protection covers data, access and infrastructure.
- Data encryption
Sensitive data is encrypted in transit and at rest.
- Access control and identity management
Multi-factor authentication, single sign-on, role-based access and least privilege protect access to our systems.
- Data control
MSPs can ask to see, correct or delete their data. We delete an MSP's data when its agreement with us ends.
- Independent testing
Third parties regularly run penetration tests and vulnerability scans on our production environment.
- Secure cloud infrastructure
Our systems are hosted on enterprise-grade cloud infrastructure. Production data is replicated across multiple availability zones and backed up daily.
- Threat detection
Intrusion detection, centralized logging and managed endpoint protection alert our team to suspicious activity.
Trust and confidence for MSPs and your clients
Privacy by design
SPECTRA is committed to protecting personal data at every layer.
Privacy is built into PRISM and our certification process from the ground up. We collect what we need to certify MSPs, we protect it, and we use it only for that purpose.
Our privacy-first practices include:
- Purpose limitation and data minimization. We process only the data we need to certify MSPs and deliver our services.
- User rights management. MSPs and their users can ask to see, correct or delete their data.
- Transparent and secure processing. Clear policies and controls keep data secure and make us accountable for how we handle it.
Read our Privacy Policy.
Responsible AI
Where we use AI to support our work, it follows three principles:
-
Human oversight
A SPECTRA certifier makes every certification decision.
-
Data protection
AI tools must meet the same security and privacy standards as all our other vendors.
-
Transparency
We tell MSPs where and how AI supports our certification process.
We practice what we certify
Every day, we ask MSPs to prove their security with evidence, not promises. We hold ourselves to the same bar.
Questions about security at SPECTRA?