Confident coverage begins with security.
We protect your agency's data with enterprise-grade security across every layer, from our facilities and people to our devices, networks and your AMS access.
CertsDesk is run by the team at Xassure.
- 4.7Trustpilot rating
- 100+Clients served
- 150+Team of specialists
- Since 2002In insurance services
Threat and vulnerability management
State-of-the-art EDR and antivirus software
Our endpoint detection and response (EDR) and antivirus solutions protect against the latest cyber threats, keeping your data secure.
Proactive vulnerability scanning
We run weekly vulnerability scans to find and fix potential security risks, so our team always works in a secure environment.
Rapid patch deployment
Our patch management process includes monthly security updates and out-of-band patches, so our systems stay protected against new threats.
Comprehensive penetration testing
We carry out penetration testing every year to test and strengthen our defences.
Identity and access management
Principle of least privilege
Every account is set up with only the permissions it needs to do its job, reducing the risk of unauthorised access.
Multi-factor authentication
Our multi-factor authentication requires people to verify their identity in more than one way, adding an extra layer of protection.
Role-based permissions
Access is assigned by role, so only authorised people can reach sensitive information.
People security
Ongoing cyber security training
Every team member completes cyber security awareness training when they join and every year after, so they stay up to date on security practice.
Regular health screenings
Team members take part in regular health screenings to keep the workforce healthy.
Rigorous background checks
Team members go through background checks at city, national and neighbourhood level, so we hire only trustworthy people.
Data security
Encryption on every computer
All computers are encrypted with BitLocker and managed through a mobile device management (MDM) system.
Remote data protection
We can wipe any device remotely, preventing unauthorised access if it's lost or stolen.
Secure, encrypted communications
All communication with your agency is secure and encrypted.
Zero-trust architecture
Every device is isolated within the network and continuously verified and monitored, limiting the spread of anything malicious.
Business continuity
Best-in-class providers
We work with top-tier providers for the highest level of service and security.
Redundant network infrastructure
Each site has enterprise-grade redundant network connections, so service stays up.
On-site generators
Our facilities have on-site generators for backup power, so work continues through power outages.
Physical security
Device-free production floor
Personal devices go in a locker before anyone enters the production floor.
Strict badge access
Everyone must show a badge before entering our facilities.
24/7 security presence
Guards are on site around the clock.
Your data in the CertsDesk app
- Each agency's data is kept separate from every other agency's.
- AMS access is stored encrypted, visible only to the team assigned to your agency, and every access is logged.
- Your data is never used to train any models.
- You can remove our access and ask us to delete your data at any time.
- Our secure app runs at certsdesk.net.
- You create a separate user for us in your AMS, and can change its password or remove it at any time.
Your data security is our top priority.
Forward one request and see the finished certificate.