Security at Yarno
The security of our platform, solutions and services is a top priority for Yarno. We recognise the trust our customers place in us to keep their data safe and secure, and we take that responsibility seriously.
SOC 2 Type 2
Yarno is continuously audited against SOC 2 Type 2 by auditors Sensiba, using Drata to manage and monitor controls, policies and vendors. SOC is a global reporting standard developed by AICPA.
Encryption
Data is encrypted in transit and at rest using industry-standard protocols — TLS/SSL for data in transit, and AES-256 for data at rest.
Data security
We store your data in the cloud with Amazon Web Services in data centres located in Sydney, Australia. Yarno employees are trained in security best practices and can only access the data they need to do their job (least privilege).
Permissions and account security
Assign different roles to administer training, manage teams or groups, or access learning. Single Sign-On (SSO) and Multi-Factor Authentication (MFA) options are available to secure accounts.
Secure development and releases
Security is considered at all stages of development. Code releases are peer-reviewed and tested — manual and automated — across development and staging environments before reaching production.
Monitoring and resiliency
Centralised logging, metrics and alerts monitor for security and system events and alert our team automatically. We also conduct a third-party penetration test at least once per year.
Our commitment to responsible AI
Yarno's AI features are built securely from the ground up, powered by Anthropic's Claude within the secure environment of Amazon Bedrock. No customer data is used to train our AI models, and your prompts are never shared or reused.
FAQs
What cyber security standards does Yarno follow?
Yarno has detailed security policies and controls in place, which have been externally audited by Sensiba and received SOC 2 Type 2 accreditation.This blog post describes our journey to SOC 2 Type 2 in detail.
Where do you store my data?
We store data in the cloud on Amazon Web Services (AWS). Yarno’s AWS servers are located across multiple availability zones in Australia. AWS shares responsibility for some aspects of the system's security, such as the physical security of data centres. More information about AWS's controls to keep its data centres secure can be found here.
Where can I find Yarno’s Privacy Policy and Terms of Use?
You can find our Privacy Policy here, and our Terms of Use here.
Who can I speak to if I want to learn more or have a security concern?
You can email security@yarno.com.au.