As an essential data processor for insurers, our top priority is the security and privacy of the data we are entrusted to protect. We are committed to providing solutions that comply with all regulatory and data security requirements. You get a robust, user-friendly solution that never compromises on security.
Our approach is built around ISO 27005 and its risk assessment process, where our people, processes and technology are continuously prioritized and hardened based on the risk they pose.
External cyber professionals regularly conduct penetration tests on Scalepoint’s networks and solutions. They analyse vulnerabilities related to the most critical attacks that occur at a specific time. Test results can be shared if requested.
External cyber professionals regularly conduct penetration tests on Scalepoint’s networks and solutions. They analyse vulnerabilities related to the most critical attacks that occur at a specific time. Test results can be shared if requested.
Our Incident Response Team monitors potential cyber security breaches 24/7. The team handles technical incidents as well as incidents where privacy legislation dictates that specific steps must be taken.
Our Incident Response Team monitors potential cyber security breaches 24/7. The team handles technical incidents as well as incidents where privacy legislation dictates that specific steps must be taken.
All Scalepoint employees are continuously trained in data security and GDPR. Relevant functional areas also receive training in performing their controls correctly and designing solutions in a safe and GDPR-compliant manner.
All Scalepoint employees are continuously trained in data security and GDPR. Relevant functional areas also receive training in performing their controls correctly and designing solutions in a safe and GDPR-compliant manner.
We prepare 3402 ISAE and ISAE 3000 audit reports through an independent audit firm. The reports provide security for the design, implementation, and administration of our internal controls regarding data security and privacy.
We prepare 3402 ISAE and ISAE 3000 audit reports through an independent audit firm. The reports provide security for the design, implementation, and administration of our internal controls regarding data security and privacy.
We have established clear lines of defense that meet industry requirements. We continuously train and certify our employees in all areas of defense. Our certifications include:
We are a member of the International Association of Privacy Professionals.
We have partnered with OneTrust, a leading provider of privacy management solutions.
We use the world’s largest and most trusted provider of CSR ratings for our annual survey.
We use GotEthics, part of the EQS Integrity Line Group, one of the most popular whistleblower suppliers in Europe.
A complete and intuitive core system (PAS), which digitises all policy and claims processes and can easily be customised to your business.
Automate repair processes for motor, property and health. Benefit from a solid ecosystem of claims suppliers and settlement tools. Provide online access to service partners and end-customers.
Settle content claims and help your customers replace, repair or valuate lost or broken items within minutes.