Responsabilite partagee

Security is a shared responsibility. PetroBench secures the platform and infrastructure. Customers are responsible for how their organization uses it.

Vos responsabilites

Acces utilisateur

• Manage user accounts and roles within your organization
• Remove access promptly when team members depart
• Assign roles appropriate to each user's function
• Review user access periodically

Authentification

• Enable and enforce MFA for your users
• Configure and maintain your SSO identity provider integration
• Secure API keys and rotate them when team members with access depart

Donnees

• Ensure the accuracy of data entered into PetroBench
• Classify data according to your internal policies
• Comply with your own data handling requirements
• Make informed decisions about data sharing and export

Utilisation

• Train users on security best practices within your organization
• Report suspected security issues promptly to security@petrobench.com
• Keep browsers and devices updated

Ce que PetroBench prend en charge

PetroBench is responsible for the security and availability of the platform itself:

• Infrastructure: Physical security, network protection, DDoS mitigation, WAF, server patching and hardening
• Application: Security-focused code review, SAST, and dependency scanning
• Encryption: AES-256 at rest, TLS 1.2+ in transit, logical tenant isolation at the database layer
• Availability: Uptime commitments per your plan, daily backups, zero-downtime deployments
• Incidents: Notification within 72 hours of a confirmed security incident affecting customer data

Resume des responsabilites

For questions about responsibilities, contact legal@petrobench.com.