Security Overview

LeanDNA® uses Virtual Private Cloud technology to isolate its services at the network layer. In addition, Network devices, including firewall and other boundary devices, are in place to monitor and control communications at the external boundary of the network and at key internal boundaries within the network. These boundary devices employ rule sets, access control lists (ACL), and configurations to enforce the flow of information to specific information system services. ACLs, or traffic flow policies, are established on each managed interface, which manage and enforce the flow of traffic.

Users access LeanDNA® only with a valid username and password combination, which is encrypted via SSL while in transmission. A random session key is encrypted and is used to uniquely identify each user. Passwords are encrypted with SHA-256 encryption (Secure Hash Algorithm) with a salt value. Encryption is one way, and LeanDNA® enforces new password regeneration when a password is lost or forgotten. The lock icon in the browser indicates that data is fully shielded from access while in transit.

In addition, administrative access requires Multi-Factor Authentication as an additional layer of security for accessing the LeanDNA®services. This requires each user accessing our servers to provide a six-digit single-use code in addition to their standard username and password credentials before access is granted to our services.

LeanDNA enforces tight operating system-level security by using a minimal number of access points to all production servers. We protect all operating system accounts with strong passwords and multi-factor authentication. All operating systems are hardened by disabling and/or removing any unnecessary users, protocols, and processes. Security updates are regularly applied to all servers.
Access to production databases is restricted to a limited number of points, and production databases do not share a master password database. LeanDNA implements security best practices, such as least privilege, by granting unique credentials to every user and only grant permission to access the services and resources required for the users to perform their jobs. All data in the database is encrypted with strong AES-256 encryption.