Protecting your data with confidence

EnergyCAP is committed to maintaining the highest standards of security, availability, and confidentiality. Holding a SOC 2 Type II certification, EnergyCAP undergoes independent audits to ensure compliance with stringent industry standards, with the most recent audit completed in April 2024. For organizations requiring federal-grade security, EnergyCAP offers a FedRAMP-authorized, Low-Impact SaaS environment, verified by Securisea, a certified Third Party Assessment Organization (3PAO). Additionally, regular penetration testing conducted by Securisea helps identify and address vulnerabilities, ensuring the platform remains robust and secure.

EnergyCAP employs advanced security measures to ensure the protection and resilience of its platform. Built on Microsoft Azure PaaS services, the platform leverages encrypted point-in-time backups stored for up to 90 days, providing continuous protection and reliable data recoverability.

End-to-end encryption secures all communications using HTTPS with TLS 1.2 or higher, safeguarding data during transit. Additionally, the corporate network is protected by Palo Alto next-generation firewalls, offering advanced threat prevention and real-time monitoring for enhanced security.

EnergyCAP maintains a comprehensive security program designed to protect its platform and users. All code is developed and peer-reviewed in-house, with every release undergoing vulnerability scans using Qualys tools to ensure compliance with secure coding standards.

We are prepared to address potential threats with a rigorously tested incident response plan, practiced annually to ensure swift and effective action during security incidents. EnergyCAP minimizes personal data storage, limiting it to encrypted passwords and email addresses, thereby reducing exposure to risk.

Unwavering commitment to security. Proactive protection of your data and systems. Regular independent audits that validate adherence to SOC 2 and FedRAMP standards, ensuring continuous alignment with industry benchmarks.

Proactive threat management, including vulnerability scanning and penetration testing, allows EnergyCAP to identify and mitigate risks before they can affect your organization. With encrypted backups, advanced network monitoring, and secure cloud services, EnergyCAP provides comprehensive data protection at every layer.