Data in Transit
All data transmitted to and from Fortrex systems is encrypted using TLS 2.0 or higher.
Security & Trust
Built to Protect Data. Designed to Stand Up to Scrutiny.
Organizations trust Fortrex with sensitive information as part of cybersecurity, third party risk, and compliance engagements. Protecting that information and clearly demonstrating how it is safeguarded is fundamental to how Fortrex operates.
Fortrex maintains a mature, compliance driven security program aligned with recognized standards and regulatory expectations.
Security Governance and Certifications
ISO IEC 27001:2022 Certified
Fortrex is ISO IEC 27001:2022 certified and actively maintains the certification through a formal Information Security Management System. This includes:
- Documented information security policies and procedures
- Ongoing risk assessment and risk treatment activities
- Management oversight and continuous improvement
- Independent third party audits
The ISO certification reflects Fortrex's commitment to systematic, defensible, and repeatable security controls.
Data Protection and Encryption
Data at Rest
Data stored within Fortrex environments is encrypted at rest using industry accepted encryption standards.
Identity and Access Management
Fortrex follows least privilege and need to know access principles. Key controls include:
Security & Operations
Infrastructure and Cloud Security
Fortrex environments are designed and maintained with security hardening and continuous monitoring as standard practice.
Vulnerability Management and Testing
Fortrex undergoes annual third party penetration testing. Findings are tracked, prioritized, and remediated through a formal process.
Business Continuity and Disaster Recovery
Fortrex maintains a documented business continuity and disaster recovery program.
Incident Management
Fortrex maintains a formal incident management process. This includes defined classification, escalation, and communication procedures.
Change Management
Changes to systems and environments follow a controlled change management process that includes review, approval, and testing.
Third Party and Vendor Risk Management
Fortrex applies the same risk discipline internally that it delivers to customers.
Monitoring and Logging
Security and operational events are logged and monitored. Monitoring tools support early detection of suspicious or anomalous activity.
Our Commitment to Customers
Security at Fortrex is an ongoing operational discipline, not a one time effort. Controls are designed to support due diligence and regulatory expectations.
Security Questions or Due Diligence Requests
Fortrex regularly supports customer security reviews, questionnaires, and audits.