Common questions

Question 1

What does it mean to offload integration security and compliance?

Accepted Answer

Offloading integration security and compliance means Prismatic handles the security and regulatory capabilities, so you don't have to build and maintain them yourself. Instead of having your engineering team manage authentication flows, encryption protocols, multi-tenant isolation, credential storage, and compliance audits, Prismatic provides these capabilities out of the box.

Your team can focus engineering on building your core product and new integrations rather than maintaining security infrastructure. This includes handling authentication mechanisms like OAuth 2.0, securing sensitive credentials with AES-256 encryption, ensuring proper customer data isolation, and maintaining the certifications required by your customers and industry frameworks.

Question 2

Which compliance standards does Prismatic support?

Accepted Answer

Prismatic has a SOC 2 Type 2 attestation. In addition, it meets GDPR, HIPAA, and CJIS requirements. This ensures that your customers' sensitive data is protected in accordance with the appropriate regulatory requirements. SOC 2 Type 2 demonstrates that Prismatic's security controls have been independently audited over time. GDPR certification ensures conformance to EU data privacy requirements. HIPAA certification lets you build integrations that handle protected health information in healthcare environments. CJIS certification allows you to work with criminal justice information systems.

These certifications are regularly confirmed through independent audits, ensuring that Prismatic maintains the highest standards for data security and privacy across all supported frameworks.

Question 3

How does offloading security reduce risk for my integrations?

Accepted Answer

Offloading security to Prismatic significantly reduces your risk exposure. Prismatic hosts all integrations with proper network isolation, ensuring compute nodes executing customer code cannot access broader infrastructure. As a result, you avoid common security vulnerabilities like insecure credential storage, inadequate authentication mechanisms, and system misconfigurations.

The platform implements security best practices, including encryption at rest and in transit, proper access controls, and continuous monitoring. By using a platform that undergoes regular independent security audits, you reduce compliance risks and protect against potential data breaches that could damage customer trust and lead to regulatory investigations.

Question 4

Can Prismatic handle authentication and sensitive data securely?

Accepted Answer

Yes, Prismatic provides proper authentication and secure handling of sensitive data. The platform supports OAuth 2.0, API keys, and various custom authentication configurations, eliminating a common integration issue. All credentials are stored using robust AES-256 encryption, with decryption limited to corresponding customers for proper multi-tenant isolation.

For OAuth integrations, Prismatic automatically manages the OAuth process and refreshes API tokens, storing them with customer-specific encryption keys. User authentication is handled by Auth0, ensuring Prismatic never stores or interacts with user credentials directly. All data storage and processing systems are configured for encryption at rest.

Offload Integration Security and Compliance for B2B SaaS

Infrastructure provided and maintained

Security and compliance managed

Authentication handled

Common questions

Ready to make your product extensible?