Operations
Security at Computle
Computle protects the platform with physical and digital controls at every layer, from the building to the session on the user’s screen. Computle is ISO 27001 certified; see ISO 27001.
Data centres
Section titled “Data centres”Access to the facilities that host Computle hardware is controlled with biometric authentication, access cards and video surveillance. Only authorised personnel enter restricted areas, and every access event is logged. Server rooms have reinforced access points, environmental controls and fire suppression.
Host isolation
Section titled “Host isolation”Each physical host runs one workstation for one customer. Nothing else runs on it, so there is no co-mingling of data and no contention for resources, and a security incident on one workstation cannot spread through shared hardware.
Site isolation
Section titled “Site isolation”Each site is segmented from every other site. Data and resources at one site are not reachable from another unless you connect them.
Tenant isolation
Section titled “Tenant isolation”Each tenant has its own network namespace. Inter-tenant traffic is blocked. A host belongs to one tenant and is reachable only from devices inside that tenant’s namespace.
Zero Trust
Section titled “Zero Trust”Computle works on the principle of never trust, always verify. No user or device gets access by default. Access needs verified identity with multi-factor authentication, is limited to the minimum each role needs, and network micro-segmentation limits lateral movement. Access is monitored continuously and policy-based.
Hardware keys
Section titled “Hardware keys”Computle staff use phishing-resistant FIDO2 keys with WebAuthn as part of multi-factor authentication. Access to Computle systems requires the key, a password and a trusted device.
Security Information and Event Management (SIEM)
Section titled “Security Information and Event Management (SIEM)”Computle’s SIEM collects events from network devices, servers, applications and security tools across the estate. Suspicious traffic, unauthorised access attempts and malware are detected from this data and can trigger automatic responses such as quarantining a device.
Auditing and logging
Section titled “Auditing and logging”Security events are logged and audited so incidents can be detected, investigated and used to improve controls.
Remote sessions
Section titled “Remote sessions”Sessions between the Computle client and a workstation are encrypted end to end. The workstation and the user’s device each hold a certificate issued by your tenant’s certificate authority, and each side verifies the other before any session data flows. No inbound port is opened on the workstation or the device; both connect outbound. Before a session starts the user is authenticated with your identity provider, and the workstation only accepts a session for the user assigned to it. Details are on the Remotle site: Security and Certificates and identity.