Security at the Core

Glia follows a Test-Driven Development (TDD) software development process including both multi-party manual and automated security checks based on OWASP application security principles. Application security controls include: defense in depth, positive security model, fail securely, run with least privilege, intrusion detection, end-to-end encryption and masking of PII amongst others. In addition, Glia undergoes third party penetration testing on a scheduled basis.

Security has always been our top priority across these three distinct layers and beyond. The Glia Interaction Platform was architected from the ground up to exceed the security, reliability and compliance needs of the most demanding financial enterprises and we hold ourselves to that standard every day. Our technology and processes are field-proven by security and compliance teams across our 400+ customers and dozens of partners in the financial industry, and our third-party compliance and assessment statuses include:

• SOC 2 Type 2
• Payment Card Industry Data Security Standard (PCI DSS)
• HIPAA/HITECH Type 1

Glia is committed to the protection of its customers' data and to maintain a compliance posture aligned with the procedures defined by applicable international laws and regulations.

Our team stays on top of the ever-changing security landscape to ensure our customers, and their customers, can rest easy knowing their interactions are secure and their financial and personal data is safe.