Security policy

Where Eidō is hosted, who can access what, and how the service is protected.

Certified host

ISO 27001

By default, Eidō is hosted at OVHcloud, whose data centers are certified ISO/IEC 27001, 27017 and 27018.

OVHcloud100% FranceDedicated servers
01

Hosting

By default, Eidō is hosted at OVHcloud, on dedicated physical servers located in France: data is processed and stored in France. In dedicated SaaS, Eidō can also be installed at another host, chosen with you.

HostOVHcloud, French host
Data centerIn France
Host certificationsISO/IEC 27001, 27017 and 27018
ServersPhysical and dedicated
Other hostsAvailable in dedicated SaaS, based on your requirements
02

Connection and authentication

The same access policy applies to every customer, and each one can reinforce it on request. Strong passwords, two-factor authentication and account lockout protect the entry to Eidō.

Access policyShared across all customers, reinforced on request
PasswordsLong and complex, rotated regularly, no reuse of prior ones
Two-factor authenticationAvailable on every account
SessionsClosed automatically after a period of inactivity
Failed loginsProgressive account lockout, with alert to administrators
InvitationsValid for a few days only
Access logKept, to trace every login
03

Access rights

Each user sees what their license and their scope allow them to see. Sensitive data, such as HR data, is only accessible to profiles that have been delegated access.

LicensesManager and operator, with distinct rights
ScopeBy entity, by team and by objective
HR dataReserved to delegated profiles
04

Traceability

Decisions and arbitrations are recorded with their author and date. Legal changes are timestamped, and each time entry is attributed to its author.

Decisions and arbitrationsAuthor, date and outcome
LegalDated history of every change
Time entriesAttributed to the person who records them
05

Service continuity

Exchanges between your browser and Eidō are encrypted. Data is backed up regularly, and a recovery plan restores the service in case of incident.

ExchangesEncrypted (HTTPS)
BackupsRegular
IncidentDocumented recovery plan
06

Integrations

External integrations, such as the AI assistant or connectors, only turn on if your administrator decides so.

AI assistantEnabled by your administrator
ConnectorsEnabled one by one, as you need

Your security team has questions?

We send a technical summary document to your team and answer their security questionnaires.

Request the document
See Eidō in action

Book a demo on your organization

  1. 01You tell us about your context.
  2. 02We prepare the demo on your use cases.
  3. 0330 minutes together, and you leave with a costed estimate.

Getting started

Tell us about you

Reply within 48 business hours