Security

Safe environment

We closely monitor current trends in Internet security and follow all recommended practices. We try to make the measures we adopt as unobtrusive as possible, but your data is still perfectly taken care of. We create a safe environment where you can focus on your work undisturbed, without worrying.

The very foundations of both myDOCK and myPLAN consist of modern frameworks with high security requirements. We also strictly adhere to OWASP standards for web application security. Even if you don't know anything about these measures, what's important is that they’re always there, protecting you.

A password isn't enough

You're surely familiar with the rules of safe behaviour on the Internet, so it shouldn't surprise you that we make sure you use different types of characters in your password for myDOCK and myPLANN. To ensure you're thoroughly protected even if your password isn't the strongest, you sign in with two-step verification. This is an additional layer of protection that will secure your account against unauthorised access.

And that's not all. Just as you don't keep your login details on a piece of paper by your computer, we also make sure that no one else has access to your password. Passwords are not stored in readable format, they’re automatically hashed using a strong algorithm and the bcrypt function. This means we don't see your passwords. And even if the database were to be leaked, an attacker would not be able to crack the passwords. We can also detect suspicious login attempts and, if necessary, remotely log out of a suspicious device.

Data under surveillance

All data your device exchanges with myDOCK or myPLANN is naturally secured with the TLS (HTTPS) protocol. We store them using the RAID method, i.e. on several independent hard drives at the same time. This prevents their loss even if a disk fails. We also carefully back up the data every day. And because you can never be too careful, we back it up to another server.

We chose the highly secure Master DC data centres in Prague and Brno for our servers. The server room is under constant surveillance, and no unauthorised persons can access the servers themselves. It includes powerful cooling, a backup power supply, and a fast, redundant internet connection, ensuring trouble-free operation. There is also a strong firewall that automatically blocks all suspicious activities, and the servers are regularly updated.

We are also strict with ourselves

We make sure that strict security measures are observed by everyone involved in the development of myDOCK and myPLAN. They regularly update their computers and all the programmes they work with to withstand the latest security threats.

We naturally also use drives encrypted with AES encryption and sophisticated password wallets. It's also important to make sure that none of our developers have access to production and user data, not even for testing purposes. We test everything exclusively on data generated by us.

Of course, the back office works with production and user data, but it treats it with the utmost care and responsibility. Central administration is in charge of security of back office computers; they have a central antivirus and an encrypted disk, and their status is continuously monitored. All communication is also encrypted.

Constant inspections

We are also under the supervision of other institutions, including the Czech National Bank (CNB), the Financial Analytical Office (FAÚ), the Czech Trade Inspection Authority (ČOI), the Office for Personal Data Protection (ÚOOÚ), the Office for the Protection of Competition (UOHS), and all producers with whom we cooperate. And before we connect a partner to our system, we perform a thorough check. We handle your personal data and the personal data of all your clients in accordance with the European General Data Protection Regulation (GDPR).

Caution above all else

Internet security is a really big topic and we pay due attention to it. We regularly check the current parameter settings to see if something can be improved. We thoroughly review all security features every quarter and update them, so there is no risk of them becoming obsolete. Whenever we add new features to myDOCK or myPLANN, we make sure they are in line with our security policies.

We leave nothing to chance, regularly conducting penetration testing of our systems and thorough security audits. However, anything can happen and even the best security measures can be broken by a sufficiently malicious attacker. But we assure you that we are doing – and will always do – our utmost to prevent anything like this from happening.

We listen to you

If you have any questions regarding the security of myDOCK and myPLAN, please contact us in the support chat or send an email to podpora@sabservis.cz. Are you interested in the technical details? We're happy to discuss them with you. Don't be afraid to ask, we're here for you.