Privacy

Obtaining detection content from third-party vendors involves granting full access to the organization’s SIEM or XDR environment, including the data sources and alert outcomes, which raises high concerns about data privacy protection. At SOC Prime, we have adopted our own content development maturity aimed at mitigating the privacy risks of our customers. Along with the data privacy imperative, SOC Prime recognizes and respects content ownership and Intellectual Property rights. Detection content made in the customer’s infrastructure based on the customer’s logs shall belong to the customer only.

Data privacy protection and ownership concerns guide our development procedures and are reflected in SOC Prime’s products that process user data. The in-house SOC Prime Team runs all the projects powered by our collective cyber defense platform, which ensures privacy protection and no access for third parties to the platform functionality. All the data is encrypted by industry standards — data at rest by the AES-256 encryption algorithm and in transit by the TLS 1.2 protocol. SOC Prime’s information security practices, policies, operations, and procedures meet the relevant standards for secure data management, which is reflected in the dedicated Service Organization Control (SOC) 2 Type II auditor’s report.