Skip to main content
Data Security and Reliability

How Hanna Protects Your Data

An overview of Hanna's safeguards, certification, and the responsibilities shared with customers.

Last updated 13 days ago

Hanna protects data through technical, organisational, and business continuity controls. This article summarises the main safeguards and explains the responsibilities shared between Hanna and your organisation.

Security management

Hanna's information security management system is certified to ISO 27001:2022. Security risks are assessed and managed through documented policies and procedures, the system is reviewed in regular independent audits, and controls are continuously improved.

Hanna's main safeguards include:

  • encryption in transit and encryption of sensitive user data at rest;
  • isolated customer environments and separation from other customers' data;
  • role-based access control, two-factor authentication, and activity logs;
  • continuous automated monitoring, backups, and recovery procedures;
  • vulnerability, change, and security incident management processes;
  • storage of customer data in European Union data centres and GDPR-aligned processing.

Shared responsibility

Security depends on both the platform and the way each organisation administers it.

Hanna is responsible for:

  • protecting the platform infrastructure and connections;
  • operating backups, monitoring, and recovery processes;
  • recording system and administrative activity;
  • maintaining platform updates and vulnerability management;
  • notifying affected customers of significant incidents as required by law and contract.

Your organisation is responsible for:

  • giving employees only the permissions required for their work;
  • disabling inactive accounts promptly and reviewing access regularly;
  • enabling 2FA and protecting sign-in credentials;
  • protecting API keys, integrations, and exported files;
  • reporting suspicious activity promptly to Hanna Customer Support.

Reliability and transparency

Hanna's historical monthly availability exceeds 99.5%, and the target is at least 99.5% each month. Check the current service status and incident history on the public Hanna status page.

Current information about certification, infrastructure, insurance, privacy, and business continuity is available on the Hanna Trust and Reliability page.

When you need information for a security review

If you are completing a supplier security questionnaire or procurement and compliance review, start with this section and the Hanna Trust and Reliability page. If a question remains unanswered, contact Hanna Customer Support and identify the document, control, or explanation you need. Never send passwords, authentication codes, API keys, or other secrets.

Was this helpful?

Still need help? Ask the team