1. Infrastructure & Cloud Security
HumanicDesk builds and manages enterprise workloads across Tier-4 hyperscale cloud environments. For South African clients with strict in-country data residency requirements, workloads are hosted within AWS Cape Town (af-south-1) and Azure South Africa North (Johannesburg). International deployments leverage multi-region failover across EU and US data centers.
Isolated VPC Architecture
Strict network segregation using private subnets, NAT gateways, and Web Application Firewalls (WAF) to isolate client production workloads.
DDoS & Threat Defense
Automated Layer 3/4 and Layer 7 DDoS mitigation via Cloudflare Enterprise and AWS Shield with continuous perimeter filtering.
High-Availability SLA
Designed for 99.99% uptime with automated database replication, multi-AZ clustering, and continuous health monitoring.
2. Identity & Access Governance
We enforce strict Zero-Trust Network Access (ZTNA) principles across all embedded operator pods:
- Mandatory Multi-Factor Authentication (MFA): FIDO2 WebAuthn hardware security keys required for all developer accounts, code repositories, and production portals.
- Role-Based Access Control (RBAC): Principles of least privilege ensure engineers access only the client repositories required for their active sprint allocation.
- Ephemeral Credentials: Automated short-lived access tokens generated via HashiCorp Vault / Azure Key Vault; zero permanent production keys stored on local developer machines.
3. Secure Software Development (SDLC)
Security is embedded into every stage of our software delivery pipeline:
Static Analysis (SAST)
Automated code scans on every pull request using SonarQube and CodeQL to catch OWASP Top 10 vulnerabilities before merging.
Dependency & Container Audits
Continuous Software Bill of Materials (SBOM) tracking to patch vulnerable third-party NuGet, NPM, and Docker base layers automatically.
Mandatory Peer Review
Every production commit requires approval from at least one Staff Architect and passes automated test suites.
4. Cryptography & Key Management
All client data handled by HumanicDesk systems or deployed on client infrastructure is secured using modern cryptographic standards:
Encryption Specifications
- Data at Rest: AES-256 bit encryption backed by cloud Hardware Security Modules (HSM, FIPS 140-2 Level 3).
- Data in Transit: Mandatory TLS 1.3 with HSTS (HTTP Strict Transport Security) enforcement and HTTP/3 support.
- Secrets Isolation: Database connection strings, API keys, and environment variables are strictly injected via secret stores at runtime.
5. Incident Response & Statutory Notification
HumanicDesk operates a formal Security Incident Response Protocol (SIRP) with 24/7 incident triage.
In the event of a confirmed security compromise or unauthorized data access affecting Client data:
- POPIA Section 22 Compliance: Immediate written notification to the South African Information Regulator and affected clients without undue delay.
- GDPR Article 33 Compliance: Data breach notification transmitted within 72 hours of becoming aware of the incident for EU/UK data subjects.
- Root Cause Analysis (RCA): Full post-incident forensic report delivered to client executive teams within 5 business days.
6. Audits & Vulnerability Disclosure
HumanicDesk undergoes annual independent penetration testing and vulnerability assessments conducted by CREST-accredited cybersecurity firms.