MFA is enabled for all the users to increase the security levels. The primary objective of multi-factor authentication is to reduce the risk of account takeovers and provide additional security for users and their accounts. Since over 80% of cyber breaches happen due to weak or stolen passwords, MFA can provide added layers of security necessary to protect users and their data.

Both role based and user based access controls are available for the Precize Inc product suite

To safeguard our infrastructure, Precize utilizes a combination of traditional firewalls. These tools allow us to monitor and control the flow of network traffic, preventing unauthorized access and ensuring data integrity and security

Precize performs regular vendor risk assessment to evaluate the security practices of our key vendors and partners. This assessment was conducted by our internal security team in collaboration with external cybersecurity experts to provide a comprehensive evaluation.

Vendor risk assessment report attached below:-

We recently engaged a leading cybersecurity firm to conduct a thorough penetration test of our systems. The objective of this test was to assess our infrastructure, applications, and security protocols against current and emerging threats.

You can view our latest pentest report below:-

Precize's infrastructure is hosted by AWS.

Additional information on AWS infrastructure security can be found at https://docs.aws.amazon.com/whitepapers/latest/introduction-aws-security/infrastructure-security.html

Personnel perform security and privacy awareness training on an annual basis. Topics covered include: Passwords, Mobile devices, Social Engineering, Physical security, Phishing and compliance with HIPAA.

Necessary, performance, and targeting cookies may be used to support our services.

In the event of a data breach involving customer data, notifications will be sent in accordance with the terms of the MSA.

We have a strong internal password policy that includes a requirement for MFA . Passwords are required to meet industry-leading complexity requirements and are stored in a company managed password manager.

Precize's internal systems access is restricted by stringent access control measures monitored and updated according to industry best practices on a regular basis. Access to internal systems is adherent to the principles of least privilege and separation of duties, subject to regular review by administrators, documented with clear rationales for provisioning and changes, and revoked according to strict termination policies.

With advanced encryption, Precize helps protect your data both at rest and in transit. Our encryption protocols erect barriers against unauthorized access to the data, including two or more independent encryption layers to safeguard against compromises of any one layer.

Physical security of our infrastructure is managed by AWS.

Additional Information can be found in AWS security documentation:

Precize Inc implements privacy by design and default principles, ensures limited data retention protocols, adheres to incident response norms, allows for appropriate third party audits, ensures data is only transferred internationally with a lawful basis, only contracts with sub-processors with adequate written commitments to data processing, respects data subject rights, does not process sensitive personal data, and provides data processing agreements to all appropriate clients and partners.

Precize Inc captures backups on a regular basis to ensure internal and customer data is protected from loss according to our Business Continuity and Disaster Recovery procedures. Request access to check our data backup and recovery policy:

Precize maintains a rigorously documented Incident Response Plan that serves as our predefined procedure for handling potential security incidents. This plan is systematically reviewed, tested, and approved by appropriate stakeholders on an annual basis to ensure readiness and effectiveness in responding to security incidents.

Personnel perform security and privacy awareness training on an annual basis. Topics covered include: Passwords, Mobile devices, Social Engineering, Physical security, Phishing etc.

Precize's Terms of use information can be found at :-

Cyber insurance is an integral part of security risk reduction at Precize. We maintain an insurance with cyber coverage in the event of a security incident that results in financial damages.

Safeguarding customer privacy is a core commitment of Precize's service.

Additional information on our privacy practices can be found at

Precize's Security Defense and Intelligence Team actively monitors the environment for known attacker tactics, techniques, and procedures (TTPs), as well as known malicious binaries and other suspicious activities. These regular activities are complemented by periodic reviews and investigations into anomalous activities to discover unknown threats occurring on a regular cadence.

All employee endpoints are protected with an advanced EDR solution. Endpoint security signals are monitored regularly for anomalous activity.

To protect the confidentiality and integrity of information stored on all employee endpoints, Precize mandates full-disk encryption. Additionally, we continuously monitor endpoint security signals to promptly identify and investigate any anomalous activity