Security Statement

This Security Statement describes how DefenseWise protects the information collected from you or about you. DefenseWise takes commercially reasonable precautions to protect the confidentiality, integrity, and security of your information, including personal data. DefenseWise also advises users to be cautious with their information, including personal data, when using the internet.

Does the DefenseWise website provide secure connections?

The DefenseWise website "www.defense-wise.com" is able to provide a secure connection between your computer and our server. We use a technology called Secure Socket Layers (SSL) encryption. This secure connection is maintained until you leave our site. Although we use SSL encryption to protect the confidentiality of your personal data while it travels on the internet, "perfect security" does not exist, and we cannot guarantee the security of personal data transmission over the internet.

Who is primarily responsible for maintaining passwords?

You are responsible for maintaining the confidentiality of your passwords. DefenseWise has the right to assume that anyone accessing its website using a password assigned to them is authorized to do so. You will be solely responsible for the activities of anyone accessing our website using a password assigned to you, even if that person is not, in fact, authorized by you. If you have reason to believe that your password has been compromised or used without authorization, you should promptly change it using the functionality provided on the site or notify DefenseWise that your account has been compromised.

What servers and hosts are used by DefenseWise?

In addition to SSL technology, the server used by DefenseWise is secured by appropriate software and responsible management of encryption keys and other control and security procedures by our hosting providers, in accordance with current international standards, such as those published by the American Institute for Standards and Technology (NIST).

Our primary host is Odoo S.A., headquartered at 40 Chaussée de Namur, 1367 Grand-Rosière, Belgium.

Our secondary host and cloud services provider is Google Cloud EMEA Ltd, headquartered at 70 Sir John Rogerson's Quay, D02 R296 Dublin, Ireland.

The privacy and security policy of Odoo can be viewed here; the privacy and security policy of Google Cloud EMEA Ltd can be viewed here.

What security standards does DefenseWise apply, directly or indirectly, and where are the data hosted?

The data centers used by DefenseWise all meet the following security standards: ISO 27001, ISO 27017, ISO 27018, SOC 1, SOC 2, SOC 3, PCI-DSS, HIPAA, CISPE, CSA STAR, and ensure end-to-end encryption with AES (Advanced Encryption Standard) of a minimum strength of 256 bits constant. DefenseWise has also chosen client-side encryption (CSE) for enhanced security of its transactions.  

The geographic locations where your data is hosted are in Belgium and France, and the backup locations are contractually limited to the following countries: Canada, France, Belgium, or the Netherlands. However, for certain services provided by DefenseWise's third-party service providers, servers may be located in other countries, but always within the European Union.

Which third-party service providers (TSPs) does DefenseWise use?

For its services, DefenseWise directly or indirectly uses the services of the commercial service provider Odoo, as well as some of its third-party service providers (TSPs) as follows:

Google Mail, used as an email application when communications occur outside the context of communications exchanged as part of contracted projects/assignments with DefenseWise, through the customer relationship management (CRM) tool provided by Odoo. Google Mail offers several information security features, such as blocking 99% of unsolicited emails, anti-phishing measures, and protection against malware. It also includes identifying corrupted links, alerts for potentially dangerous attachments, monitoring of user account usage, and the ability to configure transmission, copying, downloading, or printing options for messages, as well as assigning them a limited lifespan. Lastly, Google Mail encrypts message content when it resides on your account and while in transit between Google’s data centers.  

Google Calendar, used as a tool for managing dates, appointments, and virtual meetings. In terms of security, Google Calendar allows you to configure both access to calendar data and its sharing, as well as the visibility of events. All of these settings can be modified by the user. DefenseWise applies a cautious policy and always adopts the most restrictive settings that still allow collaboration among its staff for the accomplishment of its projects/assignments.  

Microsoft Teams, used as a real-time communication and virtual meeting application, with mandatory data such as the type and version of the user’s device to ensure service connectivity, transmission of security patches, and diagnostic data to detect severe operational failures. It also collects optional data, including items such as how the task list is sorted (alphabetically/chronologically/etc.), how frequently the sorting order is modified, and how often the "+" button is pressed in a conversation to use emojis. Each user can decide whether to allow Microsoft to collect optional data.

OneSignal, used for push notifications in the browser for visitors to the DefenseWise website, with non-personal browsing data, geolocation information, and language (non-identifiable information) shared, and the identity of the browser/mobile device stored.

Plausible, used as a data analysis tool for traffic on the DefenseWise website. All site metrics are performed completely anonymously. No cookies are used, and no personal data is collected. There are no persistent identifiers. No cross-site or cross-device tracking occurs. The data related to the DefenseWise site is not used for other purposes. All visitor data is exclusively processed by servers owned and operated by European companies, and the data does not leave the European Union.   

Google Analytics used for anonymous analysis of the audience of the DefenseWise website and potential unsubscriptions, with the aim of sharing non-personal browser data, anonymized IP addresses, geolocation information, and language (non-identifiable information).

Google reCAPTCHA used for the protection of forms on the DefenseWise website, sharing browser and device characteristics, as well as Google cookies.

Google Search Console used as a website SEO tool to monitor and maintain DefenseWise’s presence in Google search results. Specifically, Google Search Console monitors user behavior before visiting a website and confirms that Google can detect the site, index its content, generate traffic data from search results, or track user click-through rates. It also sends alerts for issues such as spam or other problems on the site, like misleading pages or broken links, and identifies websites that link to DefenseWise. No personal data is collected by Google Search Console, and there are no persistent identifiers.     

Does DefenseWise use cookies and what are they?

When you visit the DefenseWise website, DefenseWise uses cookies. Cookies are small pieces of text sent by the servers that DefenseWise uses to your computer or mobile device when you access DefenseWise services. They are stored in your browser and then sent back to the servers through the DefenseWise website so that DefenseWise can directly provide you with appropriate contextual content. DefenseWise uses your cookies to support your activities on the DefenseWise website, such as efficiently managing your session.

Cookies are also used by DefenseWise to understand your preferences based on your previous or current activity on its website (the pages you've visited), your language, and your country, allowing DefenseWise to provide you with enhanced services.

DefenseWise also uses cookies to help compile global data on traffic and interactions on its site, aiming to offer you a better visiting experience and improved services.

You can request that your computer warn you each time a cookie is sent to your browser or mobile device, or you can choose to disable all cookies. Each browser is slightly different, and you can check the "help" menu of your browser to disable them entirely or partially.

For further assistance, we refer you to the following useful links:

Chrome :    https://support.google.com/chrome/answer/95647?hl=en

Edge :         https://support.microsoft.com/en-us/help/4468242/microsoft-edge-browsing-data-and-privacy

Firefox :      https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

Safari:         https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Opéra :       https://help.opera.com/en/latest/web-preferences/#cookies

DefenseWise servers do not support Do Not Track, as there is no established industry standard for Do Not Track compliance.

This Security Statement was last updated on October 21, 2024.