Security and Data Governance Built for Public Infrastructure
CIPO protects program information with tenant isolation, configurable role-based access, encryption, audit trails, identity integration, and resilient Azure-hosted architecture—so agencies can collaborate without giving up control.
Securing your data is of the utmost importance to CIPO
CIPO is hosted on Microsoft Azure, an enterprise-grade cloud platform backed by decades of experience operating some of the world’s largest online services. Azure’s globally distributed data centers meet recognized security and reliability standards, including ISO/IEC 27001 and NIST SP 800-53.
CIPO maintains a high standard of information security and is currently undergoing a SOC 2 Type II examination covering the Security, Availability, Confidentiality, and Processing Integrity Trust Services Criteria. This independent examination reflects our continued commitment to maintaining strong security controls and protecting customer data across the CIPO platform.
CIPO Data is Protected and Replicated in Multiple Datacenters
Rest assured, your valuable data is securely stored in an encrypted database and storage container, ensuring its confidentiality. Utilizing the robust AES 256 encryption algorithm and complying with FIPS 140-2 standards, Azure SQL databases and storage provide state-of-the-art protection for your data. A virtual network separates communication among the CIPO Application, the database, and the storage container, ensuring that your attachments and files are stored securely in an encrypted format.
Control your data ACCESS.
FLEXIBILITY SHOULDN'T TRUMP SECURITY
Define who can view, create, edit, approve, and manage information with flexible, role-based permissions. CIPO gives you precise control over data access, ensuring each user has the right level of visibility and authority based on their role, project, and responsibilities.
Our approach.
Configure Access Around Your Organization
CIPO’s user and role management capabilities let administrators define access by role, project, workflow, and process stage. Your organization can use familiar naming conventions and reusable permission templates to maintain consistent governance across projects while giving every participant the appropriate level of access.
