Security designed into the operating environment.
Security, access control, data protection, auditability, and operational resilience are architectural considerations throughout ConnectRMS — designed into the connected operating environment rather than added around it.
Security Architecture
Protect the environment, the data, and the work.
Identity & Access
The right people, with the right access.
-
Role and access controls
User permissions and access controls govern who can see and act on information within the platform.
-
Authentication
Access is designed to require authenticated users, with the authentication approach defined for each implementation.
-
Administrative access
Configuration is centralized in Command Center, and administrative access is designed to be limited to authorized roles.
-
Activity attribution
Audit trails are designed to attribute actions and changes to the users who performed them.
Data Protection
Protect the information the work depends on.
Payment-data architecture · illustrative
Controlled data flows
Connections to payment, communication, and data providers are designed as managed, controlled data flows.
Consumer & account information
Consumer and account information is designed to be governed by the same permissions and access controls as the work performed on it.
Integrations
External systems connect through the platform integration architecture rather than ad hoc, unmanaged connections.
Payment-data architecture
Payment processing is designed around processor-based, tokenized approaches, so card and bank account credentials are handled by payment processors rather than held as raw credentials in ConnectRMS.
Auditability & Operational Control
Traceable across the connected platform.
Traceability scope varies by capability, release, and configuration.
Resilience & Monitoring
Built to stay observable and resilient.
-
Cloud architecture
ConnectRMS is architected on Amazon Web Services, using modern cloud infrastructure as its foundation.
-
Monitoring & observability
Monitoring and observability are part of the platform architecture.
-
System health
Designed to give operations teams visibility into the health of platform services.
-
Operational resilience
Availability, resilience, and scalability are considered in the architecture of the platform.
Uptime, service-level, and recovery objectives are not published on this site.
Cloud Foundation
Built on AWS. Secured by design choices.
Hosting on AWS is not itself a ConnectRMS certification or an AWS endorsement or partnership, and does not by itself make ConnectRMS compliant. ConnectRMS does not publish certifications, attestations, or compliance claims unless they have been formally confirmed and are applicable to the ConnectRMS environment.
Security & Compliance
Two different jobs, one connected environment.
Security architecture
Protects the environment
- Identity and access controls
- Controlled data flows and integrations
- Audit trails and traceability
- Monitoring and resilience
ConnectRMS Compliance
Supports compliant operations
- Compliance workflows
- Audits and quality oversight
- Complaint oversight
- Evidence and operational controls
Security & Regulatory Alignment
ConnectRMS operates within a security and compliance framework designed to support applicable regulatory requirements, including the FTC Safeguards Rule, and to align with independently assessed control frameworks such as SOC 2 Type II.
Designed to support compliant operations — not a guarantee of legal compliance.
Security Conversations
Discuss ConnectRMS security architecture.
Prospective customers and security and technology teams are welcome to discuss the architecture, controls, integrations, and implementation requirements with our team.
sales@connectrms.net