MangoApps Security

Is the front door to your IP locked?

MangoApps is the only HITRUST & SOC 2 Type II certified digital hub for 100% of your workforce.

Intranet & communications are the front door to your company’s data. Ask yourself if they have the same ironclad security as your customer-facing systems.

Security and compliance mangoapps whitepaper
Security features, encrypted data

SECURITY

Ironclad security

MangoApps implements multiple layers of security to protect your data including:

  • Built-in data loss prevention policies

  • Real-time access to audit and access logs

  • Default encryption of all data at rest and transit

  • 100% hosted on AWS with AWS-recommended security practices

HITRUST-certified security

compliance

Meet compliance and regulatory requirements

MangoApps is designed to meet specific industry regulations and international security and data privacy standards:

  • HITRUST (includes HIPAA compliance) & SOC 2 Type II certified

  • BAA signing for healthcare companies

  • Advanced content moderation capabilities

eDiscovery compliance security settings

governance

Content Governance

MangoApps offers governance and risk management capabilities that are flexible enough to meet your organization’s needs, no matter what they are:

  • Built-in eDiscovery features

  • Global data retention policies

  • Custom data export and backup

MangoApps hosted on AWS

UPTIME GUARANTEE

Get peace of mind with 99.9% uptime

You need to ensure that your systems stay up around the cloud, and that's why we guarantee 99.9% uptime for our customers:

  • Redundancy and failover across multiple AWS regions

  • Priority enterprise support and dedicated CSM

Trusted by companies

Improve Security & Employee Experience with Single Sign-On

Eliminate wasted time and frustration employees face hunting for usernames and password for different apps your company uses.

SSO for employee apps

Connect

Connect MangoApps with SAML, OAuth2, AD, LDAP, Office 365 & G Suite SSO

Secure access

Allow users to securely access company apps right from their dashboard

User experience

Consolidate user experience and replace the costly SSO providers

security

Security & Compliance

It’s critical to us that your information is safe and secure. From development to hosting to monitoring, we’ve created multiple layers of security to keep your data secure and private.

Application-level Security Features

MangoApps provides a wide-range of application level security to ensure your account is as secure as you want it to be.

Platform Level Security

MangoApps is optimized to run on AWS and has been running in the AWS cloud for over 10 years

Cloud And Process Security

Our data protection is multi-level starting with our choice in data centers, data transport and encryption requirements, and hiring procedures. Our software architecture undergoes periodic vulnerability tests to protect against malicious attacks.

Search audit logs

AUDIT LOGS

Track changes in real time

Keep track and log all admin-made changes. Actions like export, activations, deactivations, deletions, and more can be tracked in the audit log.

Admin roles for retail dashboard

CUSTOM ADMIN ROLES

Split duties & manage permissions

Custom admin roles make it easy to split duties and keep everything organized. Create custom admin roles to give specific users access to the admin portal for the administration of modules and features.

Manage user devices remotely

REMOTE DEVICE MANAGEMENT

Minimize risk with efficient offboarding

Securely offboard employees by automatically deactivating mobile/desktop devices when an employee departs your organization. Devices can be wiped out, disabled, and retired in bulk actions.

RECOVER DELETED CONTENT

Flexible options for data recovery

Network and user-level trash cans allow for the recovery of deleted content without IT intervention. After a predetermined period of time, any content that resides in a trash can is permanently deleted.

eDiscovery compliance

DISCOVERY & LEGAL HOLD

Cover all bases with audit-ready logs

Audit-ready logs of content, conversations, and actions can be generated in the event of a legal hold.

Security FAQs

HITRUST (the Health Information Trust Alliance) was founded in 2007 and was created to help organizations in all industries, but especially healthcare, make compliance with requirements such as HIPAA into a concrete, demonstrable certification.

They have created a system where a company can undergo a rigorous process to demonstrate their compliance with a number of common security frameworks, and then some, with a single certification. This eliminates the need to go through many simultaneous processes with different third parties, and puts a verifiable system in place through which vendors like MangoApps can say definitively that they manage data, information risk, and compliance at the level required by security-minded clients.

Per HITRUST’s website, HITRUST CSF is a certifiable framework that provides organizations globally a comprehensive, flexible, and efficient approach to regulatory/standards compliance and risk management.

“Developed in collaboration with data protection professionals, the HITRUST CSF rationalizes relevant regulations and standards into a single overarching security and privacy framework. Because the HITRUST CSF is both risk- and compliance-based, organizations of varying risk profiles can customize the security and privacy control baselines through various factors, including organization type, size, systems, and compliance requirements.” Read more.

In short, it is a certifiable standard for data security that is risk-based rather than compliance-based.

HIPAA is a law that requires organizations to meet a series of requirements related to security. HITRUST is a framework incorporating aspects of HIPAA and other compliance standards, which gives organizations a way to show evidence of their compliance with these standards.

With HITRUST certification, organizations show that they have met a measurable set of criteria and objectives around security and risk.

Learn more about HITRUST from their site.