Each protection is explained in plain words first. The technical detail for your IT team follows right after.
Each organization’s data sits in its own separate storage, like a filing cabinet with its own lock. Another company’s data, or even your own demo organization, never mixes with your real records. We, the people who make AverDesk, cannot look inside your organization either. Technically: every organization has its own database, and one subscription can hold several isolated organizations plus demo organizations.
A contractor you invite to look after two servers sees those two servers and nothing else. The rest is hidden from them, and if they try something they are not allowed to do, AverDesk tells them why. Technically: teams decide which assets a person can reach, roles decide what they can do with them, and an invitation can grant rights to specific objects. One person counts once across all your organizations.
To collect data from your servers, you install a small program (an agent) on Windows or Linux. It only sends data out to AverDesk, so nothing from outside has to get in: there are no inbound ports to open in your firewall. Your staff and groups are copied from the company directory (AD/LDAP) in read-only mode. AverDesk reads that list and never changes it. The domain service account it uses has no password stored in AverDesk.
Passwords, keys and other secrets stay on the server and are never sent to the browser, so nobody can pull them out of a browser on someone’s laptop. If someone copies a logged-in session and tries to use it, AverDesk detects the session theft. The application itself runs in containers, which are isolated, packaged environments.
On a schedule you choose, AverDesk copies your data, encrypts the copies and sends them to a separate server over FTPS (secure file transfer). If something goes wrong, restoring from a copy is built into the product. The encryption key is kept in the server environment, not in the database, so a copy cannot be read without it. Want to know how long copies are kept or how fast you can recover? Write to support@averdesk.com.
