Apart from yourselves, only the appointed Risk Owner and/or Asset Owner has access to the production environment (maximum 2 persons). Please refer to our Data Processing Agreement for more information.

We have strict security policies in place for all our employees. The Data Processing Agreement (Annex III: Technical and Organisational Measures) contains more information on the steps we take to protect your data.

We have been audited and are certified in a number of areas, including ISO 27001, Cyber Essentials Plus and several independent pentests - please refer to the Trust Center for full details.

Don't hesitate to contact us if you have any questions about data security at Admin By Request.

In addition to using OPSWAT MetaDefender, we use VirusTotal Monitor (VT monitor) from VirusTotal to ensure Admin By Request updates are free of viruses and other malware.

VirusTotal is owned by Google and offers scanning of files from over 70 antivirus scanners and URL/domain blocklisting services, including well-known brands such as Avast, Avira, Bitdefender, Kaspersky, McAfee, Sophos, and Trend Micro, as well as specialized security vendors like Cylance, DeepInstinct, CrowdStrike, and SentinelOne.

When we release updates, the binary files are uploaded to our VT monitor account for inspection and we thereby have confirmation that the files are clean before we put them into production for you to download.

Should any files be flagged as false positives by a vendor, this vendor is automatically notified and we await resolution before releasing the code. Proactively, we also keep the last three releases in our VT monitor account. All files are then scanned every day by all 70+ engines. We are notified if any false positives arise and we make sure the vendor flagging the file adds it to their approval list for future reference.

Refer to How it works for more details on VirusTotal's scanning and inspection process.