Security Features

engini is soc2 compliant and as such, has a complete security program with documented policies and procedures engini also have secure development and testing, a secure and scalable infrastructure, and capabilities within the product that enhance security and give customers control over key security features access and authentication password policy enforcement users login to engini using a password that is known only to them engini enforces password length, complexity, and expiration standards passwords are not stored; instead, as is standard practice, only a secure hash of the password is stored in the database session timeout engini supports automatic session logout after a period of time organizations can set a timeout duration according to their security needs an admin can update their account timeout duration by navigating to admin page > security tab > session timeout duration two factor authentication an organization can mandate that their users configure their accounts to use two factor authentication engini supports sms & email ip filtering ip filtering helps to ensure that traffic to engini is restricted to authorized users and / or http requests (webhooks) from specific ip addresses / countries to clarify the purpose and role of each rule, add a short explanation in the description column the text must not exceed 250 characters organizational separation admins can configure a separate workspace for each team or business function each workspace has its own set of users and resources, such as connections, workflows, and tables users can only access the resources of the workspace to which they are assigned separation of environments engini supports a multi phase development lifecycle, in which development, testing, and production are performed in separate environments and by different users secure access to on prem engini’s on premise agent (opa) allows customers to securely access authorized on premises applications, databases, and folders via specific hostnames and ip addresses apps connections oauth2 where possible, engini workflows are configured to connect to applications using user supplied credentials through oauth2, thereby eliminating the need to store credentials in engini however, if an application requires credentials to be stored, they are encrypted using a 256 bit key data protection data encryption engini encrypts all data stored at rest using a strong encryption algorithm (aes 256) this data includes workflows, connections, workflow history, and audit logs data retention engini stores transaction related data for a limited period of time, to provide visibility into system activity, facilitate testing and debugging, allow the re running of failed transactions, and support long running transactions the retention period varies by engini plan and in some plans is configurable