Customer's data on our database is logically segregated by account-based access rules. Customer accounts have unique Customer names and passwords that must be entered each time a Customer logs on. Al Turathia BookStore issues a session cookie only to record encrypted authentication information for the duration of a specific session. The session cookie does not include the password of the Customer.
Customer application passwords have minimum complexity requirements. Passwords are individually salted and hashed.
For our Team Collaboration accounts, Al Turathia BookStore supports SAML 2.0 integration, which allows you to control access to Al Turathia BookStore across your private and work or public networks and define authentication policies for increased security.
Data Encryption: Certain sensitive Customer's data, such as credit card details and account passwords, are stored in encrypted format.
Al Turathia BookStore enables you to export your data from our system in a variety of formats so that you can back it up, or use it with other applications.
All Al Turathia BookStore Customer's data is stored on servers located in the United States.
All Al Turathia BookStore information systems and infrastructure are hosted in world-class data centres located in the most secure web hosting provider GoDaddy. These data centres include all the necessary physical security controls you would expect in a data centre these days.
Fully redundant IP network connections with multiple independent connections to a range of Tier 1 Internet access providers.
Continuous uptime monitoring, with immediate escalation to Al Turathia BookStore staff for any downtime.
Our database is replicated in real-time and can failover in less than an hour.
Backups occur daily at multiple geographically disparate sites.
System functionality and design changes are verified in an isolated test “sandbox” environment and subject to functional and security testing prior to deployment to active production systems.
Firewalls restrict access to all ports except 80 ( HTTP) and 443 (https).
Secure VPN, 2FA (two-factor authentication), and role-based access are enforced for systems management by authorized engineering staff.
Logging and Auditing:
Central logging systems capture and archive all internal systems access including any failed authentication attempts.
Encryption in Transit:
By default, our website has Transport Layer Security (TLS) enabled to encrypt respondent traffic. All other communications with the alturathia.com website are sent over TLS connections, which protects communications by using both server authentication and data encryption. This ensures that Customer data in transit is safe, secure, and available only to intended recipients. Our application endpoints are TLS only and score an “A” rating on SSL Labs‘ tests. We also employ Forward Secrecy and only support strong cyphers for added privacy and security.
Latest security patches are applied to all operating systems, applications, and network infrastructure to mitigate exposure to vulnerabilities.
Third Party Scans:
Our environments are continuously scanned using best of breed security tools like MacAfee. These tools are configured to perform application and network vulnerability assessments, which test for patch status and basic misconfigurations of systems and sites.
External organizations perform penetration tests at least annually.
We take the security of our platforms very seriously! Al Turathia BookStore runs a private bug bounty program to ensure our website pages are continuously reviewed for vulnerabilities.
Organizational & Administrative Security
Information Security Policies:
We maintain internal information security policies, including incident response plans, and regularly review and update them.
We perform background screening on all employees, to the extent possible within local laws.
We provide security and technology use training for employees.
We screen our service providers and bind them under contract to appropriate confidentiality and security obligations if they deal with any Customer data.
Access controls to sensitive data in our databases, systems, and environments are set on a need-to-know / least privilege necessary basis.
We maintain and monitor audit logs on our services and systems.
Compliance and Certifications
Al Turathia BookStore is currently PCI 3.1 compliant.