Security & Trust
Control over who sees what, and a record of every change
A GRC platform holds sensitive information about your risks, suppliers and incidents. ILSERIS is built so access is deliberate, changes are traceable and your data stays yours.
Principles
How ILSERIS keeps your data in hand
The controls built into the platform and the way we build it.
Role-based permissions per module
Decide per module which roles may read and which may write, so people see the records their work requires.
Full audit trail
Every change is recorded: who changed what, when, and the value before and after.
Module licensing
Only the modules in your signed licence file are switched on, so unlicensed modules cannot be reached.
Data you own
Get your data out whenever you need it, through exports and a public REST API.
How we build
Code review on every change, separated development, test and production environments, and dependencies kept up to date.
Privacy and GDPR
We act as your processor under a data processing agreement, in line with the GDPR.
Responsible disclosure
Found a vulnerability? Read how to report it to us responsibly.
Audit questions
What your auditors will ask
And where ILSERIS gives you the answer.
- Who can see and change this information?
- Role-based permissions per module show which roles may read and which may write.
- Who changed this record, and what was it before?
- The audit trail records the author, the time, and the value before and after.
- Which evidence supports this control?
- Requirement, control, evidence, finding and CAPA are linked records, so you can follow the chain from one to the next.
- Was this finding followed up?
- Findings lead to corrective and preventive actions that are tracked to closure.
- Can you give us the underlying data?
- Exports and the REST API give you the records behind every report.
Procurement
Security review for procurement
We answer your security questionnaire and share architecture and data-processing documentation under NDA during procurement.
See ILSERIS in action.
A focused walkthrough, built around your regulatory landscape and operating model.