Technology & security overview

The information below provides detailed information on our platform’s Security and Technology features. For further questions or additional detail on any topics covered, please contact your OperationsHERO representative to arrange a call with our technical team.

User Provisioning

  • Overview: OperationsHERO supports Single Sign-On (SSO) via Microsoft and Google accounts, with an option for standard email and password setup.
  • User Roles & Permissions: User roles are highly customizable. Our team will work with you to ensure that users have access only to the data relevant to their roles.
  • Self-Service & Admin Controls: Our administrative controls allow you to easily manage, access, and export your data with full visibility into activity within your OperationsHERO instance.

Reliability & Performance

  • System Uptime & Redundancy: Our platform, built in 2021, uses Google Cloud Platform for hosting, with Cloudflare for traffic monitoring, DDoS protection, and caching. Our current uptime exceeds 99.97%.
  • Speed & Responsiveness: We deploy on optimized Kubernetes instances, ensuring high performance and scalability.
  • Maintenance & Support: Regular updates occur one evening per week, typically Thursday, Friday, or Saturday from 12am-2am ET.

Privacy of Your Data

  • Data Collection: We collect only the information necessary for users to perform tasks within our platform.
  • Artificial Intelligence: Our web app harnesses the power of Gemini Enterprise, ensuring your data remains secure and is not shared with third parties.
  • Data Usage: We protect your data and never sell it. We carefully evaluate third-party integrations and avoid analytics products with data practices that don’t align with our values. All data related to your organization and users remains yours.
  • Data Retention & Deletion: Customer data is retained as needed. If you choose to move to another provider, we ensure unrestricted access to your data and allow for deletion upon request.
  • Data Migrations: We have developed custom import tooling that enables quick, painless transitions from many of the industry-leading CMMS platforms.

Security Features

  • Data Encryption: We use SHA256 RSA certificates for HTTPS and AES-256 for data at rest encryption.
  • Access Controls: Following best practices, we enforce 2FA for internal users, strong password policies, and strict adherence to the Principle of Least Privilege.
  • Monitoring & Incident Response: Our policies cover Disaster Recovery and Incident Response, with further details available upon request.

SOC2, StateRAMP, TX-RAMP, and Other Compliance

  • Certification Status: We align our infrastructure and policies with SOC 2 Type I, StateRAMP, and TX-RAMP standards and have achieved provisional status for TX-RAMP.
  • Google Security Compliance Center Reporting:
  • OWASP: Pass
  • SOC2: Pass
  • PCI DSS 3.2.1: Pass
  • CIS Kubernetes: Pass
  • ISO 27001: Pass
  • NIST CSF: Pass
  • Verification & Audits: We continually monitor our compliance with these standards through the Google Security Compliance Center.

API

  • Security: Our APIs use standard security mechanisms, with encryption both in transit and at rest.
  • API Access & Authentication: Includes secure API key management, user authentication, and access restrictions.
  • DDoS & WAF Protections: Cloudflare provides DDoS mitigation and a WAF, with real-time traffic and packet monitoring, advanced alerting, and threat mitigation.
  • Integration Support: Our APIs facilitate integration with partner and customer technologies. API keys and support materials are provided during onboarding as needed.


At OperationsHERO, we prioritize the privacy, security, and reliability of our platform to help our customers operate with confidence. Our approach to data protection, compliance, and performance reflects our commitment to delivering a trustworthy solution that meets both industry standards and your organization’s needs. Should you have any further questions or require additional details, please don’t hesitate to reach out to our technical support or customer success team—we’re here to support you every step of the way.