IT Security & Certificates
IT security, data protection and availability are top priorities at Projectworx. With an ISO/IEC 27001:2022-certified organisation, hosting in German data centres, comprehensive backup strategies and modern authentication procedures, we lay the foundations for the secure, reliable and data-protection-compliant use of Projectworx.
Security Standards & Data Storage
ISO/IEC 27001:2022 certification
MByte is fully ISO/IEC 27001:2022 certified! The scope of our certification covers our entire company, including the development and operation of all software solutions, along with all related processes and services. We are dedicated to continuously raising our security standards and processes for our customers.
View the ISO certificateServers in Germany
Mbyte uses dedicated servers to host Projectworx; these are hosted by Ionos in a data centre in Karlsruhe. The data centre is certified according to ISO/IEC 27001, ISO 9001 and OHSAS 18001.
Ask questions about hostingBackups at different locations
Backups are also hosted on an Ionos data storage platform, which is located in a different data centre.
Request details on data backupSeparate databases
The customer does not receive a dedicated server but shares the infrastructure with other Projectworx cloud users. However, the data is stored in separate databases, which means that there is no possibility of the data being mixed up or made accessible, either intentionally or unintentionally.
Segregated networks
To better protect sensitive data, we host test and development systems on a separate network, isolated from production systems. Sensitive systems, such as database servers, have no public interfaces and can only be accessed internally via private networks.
Authentication & Access Security
Single-Sign-On (SSO)
Projectworx supports flexible authentication through the integration of external identity providers. In addition to popular providers such as Google, Microsoft Entra (Azure AD) in particular can also be integrated via OpenID Connect (OIDC). This allows existing single sign-on (SSO) environments to be used seamlessly. User management remains entirely within your IT infrastructure, so that all users can be centrally managed and efficiently administered.
Multi-factor authentication (MFA)
To provide an additional layer of security, Projectworx offers multi-factor authentication (MFA). This allows users to use, for example, a TOTP code from an authenticator app or a one-time code (HOTP) sent via text message or email, in addition to their password. Administrators can use the security settings to ensure that MFA is enabled as a mandatory requirement for all users.
The system performs full backups on a daily, weekly, monthly and annual basis.
- A differential backup is also carried out at 60-minute intervals
- The differential fuses will be retained for 3 days
- Daily backups are retained for 2 weeks
- Weekly backups are retained for 8 weeks
- Monthly backups are retained for 1 year
- Annual backups are retained for 3 years
As mentioned above, all backups are stored in a dedicated data storage facility, also hosted by Ionos. The backup is carried out using an air-gap method.
There is also an anonymisation function which replaces personal names with a freely chosen alias. This means that data such as actual times, tasks, etc. are retained for documentation purposes, but can no longer be linked to any real person.