How Markular Protects Your Data

Last updated: January 9, 2025

At Markular, we operate with clear routines and measures regarding data security and data storage. We deeply value the trust our customers place in us when they entrust us with their data, and we take our responsibility for safeguarding that data and being transparent about our processing methods very seriously.

When developing Markular, we chose to partner with Microsoft and their Azure cloud platform. Microsoft has demonstrated an exceptional track record in data security, and Azure has earned recognition as a secure, versatile development platform. Microsoft continuously implements new security certifications and is approved for hosting sensitive government data in various countries.

As a SaaS vendor, the security of our customers’ data is our top priority. We embrace a “security first” mindset in everything we do and work diligently to enhance our systems for maximum security. There are five core areas that impact the overall security of our service:

Core Security Areas

1. Choice of Platform

Our crew management solution runs on, and data is stored on, the Azure Cloud platform. This secure, scalable platform is used by cloud software vendors worldwide. It provides us with tools to control your data’s location, ensure replication to prevent data loss, and implement robust security mechanisms. We trust Azure to the point where all our own services run on the same platform.

2. Security-First Development

Everything we create follows “privacy by design” principles. Our code undergoes automatic testing and user testing, and we periodically engage external parties to scrutinize and evaluate the security of both individual components and the system as a whole. Their findings are reviewed and incorporated into our development roadmap when improvements are needed.

3. Strong Encryption Standards

We implement comprehensive encryption measures. All data transmitted between clients and servers is encrypted using HTTPS and Transport Layer Security. Additionally, all data is encrypted when stored in the Azure data center—known as encryption at rest.

4. Strict Access Controls

We maintain strict controls over data access. When you contact Markular Support for assistance, we always request your consent before taking any actions that affect your data. We have implemented technical and organizational safeguards to limit access. When engaging third-party suppliers for additional services, we thoroughly assess their ability to meet our stringent security and privacy requirements.

5. Continuous Monitoring

Our team maintains 24/7 vigilance to respond to security incidents of any scale. We regularly update and revise our Data Protection Impact Assessment plan to ensure preparedness for any situation.

Specific Security Measures

IT Security Framework

  • Clear definition and documentation of management and employee responsibilities
  • Comprehensive system and contingency plans for handling breaches, viruses, natural disasters, and hacking attempts
  • Regular system checks for risks and vulnerabilities
  • Daily backups with Microsoft Azure Recovery Service Vaults
  • Strict access control to customer databases
  • Up-to-date virus scanning software on all connected computers

Data Discipline Policy

All Markular employees must:

  • Sign a Data Discipline declaration
  • Comply with strict password regulations
  • Follow detailed IT security rules
  • Understand the consequences of security violations

Data Storage and Location

Markular primarily hosts services in Microsoft Azure’s Europe North/West data centers, with the ability to accommodate other regions based on customer requirements and compliance needs. Data will not be moved outside the chosen region without explicit customer consent.

Customer Data Protection

  • All data is encrypted in transit and at rest
  • Custom domain names supported with trusted certificates
  • Data replication for redundancy
  • Strict access controls for support personnel
  • Comprehensive audit logging of all access
  • Clear procedures for data deletion upon subscription cancellation

GDPR Compliance

  • Assistance with data subject rights (access, erasure, portability)
  • Implementation of Data Protection Impact Assessment (DPIA)
  • Clear procedures for handling data breaches
  • Privacy by design in all development
  • Regular security assessments and updates

For additional questions about our security measures, please contact support@base12.no

Frequently Asked Questions

Where does Markular store data?

Markular primarily operates in Microsoft Azure’s Europe North/West regions, with the ability to accommodate other regions based on customer requirements and compliance needs.

How does Markular secure customer data?

We use Microsoft Azure’s comprehensive security features, including encryption at rest and in transit, access controls, and regular security audits. More information on Azure security can be found in Microsoft’s documentation.

What happens to my data if I cancel my Markular subscription?

We will assist you in migrating your data and ensure a smooth transition. After confirming successful data transfer, we will securely erase all your data from our servers.

How does Markular handle data subject requests?

We provide tools and assistance for handling data subject requests, including access, erasure, and portability rights under GDPR. Our system is designed to make these processes as straightforward as possible.