Your Data is Safe
Even in cafes, airports and other places with public WiFi connections, passwords to Xanaxx cannot be stolen. Users can confidently open Xanaxx in public places through WiFi or mobile network connections.
Xanaxx is accessed exclusively through an SSL connection, from initial authorization to the downloading and uploading of company data.
Xanaxx has over 10 years of experience in providing the highest level of security for web projects. Xanaxx benefits from all of this experience and technology, including Xanaxx’ own proactive Web Application Firewall, which categorically blocks the vast majority of attacks on web applications.
Two Step Authorization
The Xanaxx OTP app provides one-time password codes for two-step authorization in Xanaxx and other Xanaxx247 products. Even if your password is stolen, your account will not be accessible to a would-be hacker.
Xanaxx247 uses two independent data centers and redundant clustering technology to make sure the service is maximally available.
Reserve copies of data are created daily.
- OPERATING SYSTEM
At the level of the operating system, the Xanaxx247 web server is behind a firewall where all ports are closed with the exception of those which are used for system purposes. Technical access to the server is carried out exclusively through Bitrix subnets.
- DATA STORAGE
All data centers used by Xanaxx247 are protected in compliance with SAS 70 Type II (which includes access to the physical storage media based on biometric data and maximum protection against intrusion) and conform to the Safe Harbor standard.
- DATA ISOLATION
User data (data of each company/client) is separated at the database and cloud storage levels. The data of different companies is isolated in such a way that there is no possibility of receiving access to access of another user by accident.
- WEB SERVER
A specialized server environment which does not allow write access to the local file system is used along with a customized PHP module which ensures isolation among users and security of user data.
- BROWSER LEVEL
- DATA TRANSFER
Data transfer for all users is carried out via an SSL-encrypted connection (with a 256-bit key).
- APPLICATION LEVEL
Xanaxx’ proactive protection blocks 100% of web attacks attempting to use application vulnerabilities. Malicious users do not have any opportunity to load malicious code via PHP. The web application conforms to WAFEC 1.0 standards. Access to Xanaxx247 is provided to users (companies) in complete isolation from other users with passwords encrypted via double md5. Limitation to specific subnets and logging of potentially threatening activity is also possible.