SmsNXT Security

smsNXT is committed to controlling security risks and protecting customers. Our security team employs coordinated strategies to ensure data security is prioritized.

Encryption

smsNXT’s data is encrypted in transit and at rest. All HTTP traffic is encrypted using Secure Socket Layer (SSL) connections, and traffic is only accepted on port 443. smsNXT’s SSL status can be verified. All data and associated keys stored at rest in our databases are encrypted using the industry-standard AES-256 algorithm. Static files, such as images and other documents, are persisted using AWS S3 storage and encrypted before being stored.

Secure Cloud Infrastructure

All application traffic is proxied through Cloudflare using a Full (strict) SSL/TLS end-to-end encrypted connection, utilizing origin certificates to ensure non-repudiation of the application’s source. All of smsNXT’s application and database storage is safely contained within Amazon Web Services’ (AWS) infrastructure, which is accredited by ISO 27001, SOC 1 and SOC 2/SSAE 16/ISAE 3402 (Previously SAS 70 Type II), and PCI Level 1.

Continuous Security Monitoring

SMSNXT continuously monitors its infrastructure-as-a-service (IAAS), software-as-a-service (SAAS) environments, and web application to detect potential security incidents in real time. Our security staff quickly responds to security alerts using the U.S. Department of Energy’s six-step process for incident handling.

Access Control

SMSNXT employees must be explicitly authorized to access company information systems before access is permitted. Access is strictly provisioned according to job function and is removed upon a change in job function or termination. Multifactor authentication is enforced for all SMSNXT employees.

Third-Party Testing

smsNXT uses third-party testers to identify web vulnerabilities. If web vulnerabilities are found, we fix the vulnerability, and third party testers confirm successful remediation.

Background Checks

smsNXT performs thorough background checks on all new employees to ensure that customer data is handled with care.

Additional Resources

See our guides for enabling Multi-Factor Authentication, Automatic Sign Off, and setting up Roles in SMSNXT.

View our Data Processing Agreement (DPA).

If you need to contact our Data Protection Officer, please email policy@smsnxt.com.