🔒Security & Privacy

At Root3, we take the security of your apps and systems very seriously. Our service includes multiple security and privacy features to ensure that your systems are always running the latest, most secure versions of apps while ensuring user privacy.

We have strict access controls in place to ensure that only authorized personnel have access to your data. Our employees are required to sign confidentiality agreements and are trained on data protection and security best practices.

We regularly audit and test our systems to identify and address vulnerabilities and we continuously monitor our systems for any suspicious activity.

We will not share, sell or rent your personal information to any third parties without your explicit consent. We will only use your personal information for the purposes for which it was collected and to communicate with you about our products and services. All sub-processors are included on this page and how we use those services.

We encourage our customers to contact us with any questions or concerns about security or privacy. If you believe that your data has been compromised, please contact us immediately.

For more information please refer to our website.

App Integrity

One of our main security features is the Developer Team ID check. This feature checks that the Developer ID of an app matches the expected Developer ID known to Root3 before it is installed, minimizing the risk of a compromised app. This ensures that only safe and reliable applications are installed on your systems from known developers.

Some apps in the App Catalog are not signed with a Developer Team ID. For these exceptions the App Catalog is not able to verify the integrity of the app. Use at your own risk and contact the developer if this is important to you.

Datacenter

The App Catalog is hosted in an EU datacenter, ensuring that all data is stored and processed in compliance with European data protection regulations. We use state-of-the-art security measures, including encryption, firewalls, and intrusion detection systems, to protect your data against unauthorized access and breaches.

Certifications

• ISO 9001 certified

• ISO 27001 certified

Sub-processors

Root3 limits the sharing of data through its sub-processors. Cloud services or other suppliers need to meet our standards for privacy and security as defined in our quality management system and information security management system. A list of sub-processors, description and how we use those for the App Catalog is shown below:

Name	Description
Cloudflare	Cloudflare provides content delivery network services, cloud cybersecurity, DDoS mitigation, wide area network services, reverse proxies, Domain Name Service, and ICANN-accredited domain registration services. We use Cloudflare for asset hosting such as installers and images and protect our web services against DDoS attacks.
Datadog	Datadog provides an observability service for cloud-scale applications, providing monitoring of servers, databases, tools, and services, through a SaaS-based data analytics platform. We use Datadog to monitor our services and logs.
Exact	Exact is cloud software that automates business processes of small and medium-sized companies and their accountants. We use Exact to manage and automate our finance, CRM, sales and projects.
HubSpot	HubSpot is an American developer and marketer of software products for inbound marketing, sales, and customer service. We use HubSpot to manage and automate our sales processes
MailChimp	MailChimp is a marketing automation and email marketing platform. We use MailChimp to share newsletters with our customers.
Outstanding24	Outstanding24 is a software platform designed to automate and streamline accounts receivable management for businesses. We use this to send payment reminders.
Postmark	Postmark is an email delivery service to send emails using APIs and without using an SMTP server. Additionally it can send emails using template. We use Postmark to send emails to customers using a template, such as invitation emails.
TransIP	TransIP is a Dutch IaaS cloud provider and offers several services and solutions such as webhosting, domain registration, DNS management, cloud computing, storage and other services. We use TransIP for our cloud environment, such as the App Catalog API, Customer Portal and other web services. Also our databases are stored with TransIP. We also store here our database backups on primary and secondary TransIP data centers.
Webflow	Webflow is a SaaS application that allows designers to build responsive websites with browser-based visual editing software. We use Webflow to host the App Catalog website.
Weglot	Weglot is an all-in-one solution that translates, manages and displays your multilingual website without the need for code. We use Weglot to localize the App Catalog website.
Zendesk	Zendesk is a service-first CRM company that builds powerful and flexible software to meet the needs of any business. We use Zendesk for incident and problem management.