Difference between revisions of "Whistleblower"
Jump to navigation
Jump to search
| Line 1: | Line 1: | ||
== Application == | |||
The Whistleblower system is fully managed by Tempus Serva Aps. | |||
The system supports the following roles and usecases | |||
* Lawyer: Handles whistleblower cases | |||
* Tenant user: Handles whistleblower cases | |||
* Whistleblower: Anonoumous users that creates new cases | |||
== Hosting setup == | == Hosting setup == | ||
The hosting is located at Amazon Webservices Stockholm data center. | The hosting is located at Amazon Webservices Stockholm data center. | ||
Revision as of 09:59, 16 September 2021
Application
The Whistleblower system is fully managed by Tempus Serva Aps.
The system supports the following roles and usecases
- Lawyer: Handles whistleblower cases
- Tenant user: Handles whistleblower cases
- Whistleblower: Anonoumous users that creates new cases
Hosting setup
The hosting is located at Amazon Webservices Stockholm data center.
The server utilizes the following supported services
- SSL certificates are automatically updated monthly from LetEncrypt
- UptimeRobot polls the server each minute checking
- Access to database
- Sufficient storage and RAM
- Database is dumped nightly
- Replicated to encrypted storage in EU
- Rentention daily 60 days, monthly 2 years
Security setup
The following security and compliance features are active
- Password policies
- Multifactor authentication (SMS)
- Storage encryption (AWS + LUKS)
- Transport encryption
- Activity and data logging
- Versioning
- GDPR deletion policies (90 days)
- Event and system logging
Note that request logging have been disabled actively, in order to secure anonomity of the users