Is My Data Secure

Is my data secure ?

Lightyear holds data security to the highest industry standards. We do so with our design of infrastructure, data encryption, ISO certification and additional security features within the Lightyear app. Read on below for more details. 

Lightyear is a fully cloud-hosted Software as a Service (SaaS) solution. This means your data is stored online on our servers which are hosted on Amazon Web Services (AWS).  AWS provide many security mechanisms including multi-location backups of our data to ensure the highest level of security is achieved.  Data is always stored across multiple Availability Zones, each separated by miles within an AWS Region, ensuring continuity of access to your data, and continuity of service.

Encryption
Lightyear data is encrypted at rest as well as encrypted in transit.  The primary AWS Region that Lightyear uses for data storage is Oregon (US).  Your Image files are held in either Dublin (Ireland) or Sydney (Australia) ... depending on which location Lightyear consider to be closer to you.

Data Segregation
Data segregation refers to the practice of separating data into distinct and secure compartments to ensure that sensitive information is not accessed by unauthorised individuals.  At Lightyear, we use data segregation on our document storage (AWS S3) and database (AWS RDS) instances.
The documents stored in AWS S3 are secured within buckets and encrypted while at rest.  Access to these documents is restricted to only those users who belong to specifically authorised customers.
The data stored on our AWS RDS instance is safeguarded with encryption while at rest.  The customer's data is stored using a unique key and can only be accessed by authorised personnel.  Customers are not able to directly interact with this data; rather, they can retrieve data related only to their company using the only the Lightyear application.

AWS is the worlds leading cloud infrastructure provider and services many of the world's largest corporations and financial institutions and they have a proven track record of ensuring data integrity is maintained at all times.  More information relating to AWS security can be found here - https://aws.amazon.com/security/  

Lightyear is also ISO 27001 certified. The basic goal of ISO27001 is to protect 3 aspects of information: 
  1. Confidentiality: Only the authorised persons have the right to access information
  2. Integrity: Only the authorised persons can change the information
  3. Availability: The information must be accessible to authorised persons whenever it is needed.
This is a leading internationally recognised certification for data and information security. It is one of the most popular standards for information security. ISO 27001 demonstrates our commitment to keeping your data secure.

For those who require higher standards of security, we also provide 2 Factor Authentication (2FA) within the Lightyear app. This serves as an additional means to secure your data and ensure only those with the right permissions can acccess your data.  Read on for more details on how to activate 2FA for either your profile or for you entire account. 


      

    Check out our
    to stay up to date

      • Related Articles

      • How does Lightyear Data Extraction work?

        Data Extraction Explained Lightyear uses world class data extraction technology to minimise your workload. We strip all of the data, line by line, from your bills, credit notes and statements so you no longer have to spend long hours manually ...
      • How to make your CSV file not change your data when opening in Excel

        Customise Excel to Leave Data Unchanged This guide is for people that are having to open their CSV file to edit something and they are finding that Excel is changing their data. For example, the leading zero's are disappearing on an invoice number - ...
      • My Profile

        Changing your profile settings Users are in control of updating their own contact and login information, as well as some communication preferences. This is done through a section called My Profile, which is found by clicking on your username in the ...
      • How to automatically round variances in your bill data

        Automatic Rounding From time to time, Rounding variances can exist between how Lightyear calculates unit prices and tax on product Bills (4 decimal places, calculate unit price and tax on the rows and then total these) and how suppliers may have ...
      • Evaluation of zero-day vulnerability in Apache Log4j December 2021

        A zero-day vulnerability was announced by Apache w/c 6.12.2021, which has impacted a number of companies across the globe. This newly discovered vulnerability allows for unauthenticated remote code execution. Log4j is an open source Java logging ...