📄 Summary: What You’ll Learn in This Article
This article explains the core components of the Security Framework, including hosting, data security and privacy controls. It provides an overview of the technical capabilities of the Marmind SaaS Platform, and describes the key security controls implemented by Marmind GmbH, for stakeholders evaluating Marmind's architecture and trustworthiness.
-
Security Certifications
-
Hosting, Data Security & Privacy
-
Integrated Security Features within the Marmind Platform
-
Monitoring, Backups & Disaster Recovery
-
Incident Handling, Vulnerability Managment
🧑‍🤝‍🧑 Who Should Read This?
This article is most useful for:
-
Security and compliance officers, IT and system administrators, solution architects, and decision-makers evaluating Marmind’s technical infrastructure, data protection, and security capabilities.
✔️ Prerequisites: What Should You Know Before Getting Started?
Level: Intermediate
Access required: No access required
-
Basic understanding of cloud architecture and SaaS platforms
-
Familiarity with security and compliance frameworks (e.g., ISO 27001, GDPR, TISAX)
Security and Data Protection
Marmind GmbH has implemented an Information Security Management System (ISMS) covering also data protection and privacy and obtained the ISO 27001:2022 certificate (in 2025) and TISAX Label (in 2026) to ensure business continuity and protect customer and partner data.
Our product – the Marmind SaaS Platform – is hosted in the Microsoft Azure Cloud, with all data residing in secure and certified data centers, ensuring industry-standard security and data compliance.
Marmind SaaS – Key Security Featuers
-
Secure authentication through strong password policy, and with optional customer AD/SSO integration
Security Advisory
The standard authentication method implemented at Marmind is password-based, with a strong password policy integrated.
However, todays industry-standards recommend at least two factor authentication as secure baseline. Therefore, Marmind strongly recommends to implement the SSO-integration for a customer Marmind instance, in order to ensure strong authentication.
-
User management with capabilities for role-based access control (RBAC)
-
Granular roles & rights management
-
Protection of sensitive user information through pseudonymization
-
Logging within the history feature
Marmind GmbH – Key Security Controls
-
Cost effective and secure hosting, with high availability and scalability
-
Strong encryption for data at rest and data in transit (TLS 1.2+ and AES 256)
-
Secure customer data handling: no sharing without authorization, and secure deletion upon contract termination
-
Strong access management for priviliged access (JIT and PIM)
-
Regular and with customers coordinated maintenance, including security patches
-
Strong backup strategy with defined RPO and RTO (via SLA), PIT recovery capability, and regular backup and disaster recovery tests
-
Modern incident management through customer support, integrated into SDLC and Release Management
-
Vulnerability managment and continuous monitoring for threat detection and system health
-
Regular penetration tests and ongoing security optimization
-
Regular awareness trainings for staff members, addressing Information Security, GDPR and AI.