Security
Security you can show your IT team: ISO 27001, EU hosting, two-factor login
Your data is hosted in a data centre in the EU. Only the people whose role allows it can see it, behind two-factor login. Every remote action on a vehicle is logged. Convivo is ISO 27001, ISO 9001 and ISO 22301 certified.
- ISO 27001 (information security), ISO 9001 (quality) and ISO 22301 (business continuity) certified.
- Data centre in the EU.
- Two-factor login, which can be made mandatory for all users of an organisation.
- Every remote action is logged.
- Each organisation's data kept separate on the multi-tenant platform.
Fleet data security: the controls you can expect
Encrypted, stored and in transit: data is encrypted when stored, not only while it travels.
Two-factor login: it can be switched on for each customer account, and made mandatory for all users of an organisation.
Role-based access: each user sees and does only what their role allows.
Single sign-on: your users sign in with your organisation's own login.
Outside security tests: the platform is tested regularly by outside security testers (penetration tests).
Told about incidents: if a security incident affects you, you are told within a set time.
EU hosting, tightly limited access: the platform runs in a data centre in the EU, and access to it is tightly limited.
No secrets in the code: Access credentials are kept in protected hosting settings, never in the code.
Who can act on your vehicles
Remote start blocking and unlocking are protected three ways. Only users whose role allows it can send these commands. They sign in with two-factor login. Every remote action is logged.
- Role allows it
- Two-factor login
- Every action logged
Your data stays yours
- We never sell your data or pass it on for anyone else's use.
- Data is kept for at least 2 years, or as agreed.
For your supplier security check
A data processing agreement and our security documents are available on request. Tell us what your check asks for.
Ask a security questionFrequently asked questions
Is Convivo certified?
Yes: ISO 27001 for information security management, ISO 9001 for quality management and ISO 22301 for business continuity management.
Where is our data hosted?
In a data centre in the EU.
Is data encrypted when stored?
Yes. Data is encrypted when stored, as well as in transit.
Can we make two-factor login mandatory?
Yes. Two-factor login can be made mandatory for all users of an organisation.
Who can block or unlock a vehicle remotely?
Only users whose role allows it. Every remote action is logged.
Can our users sign in with our own login?
Yes. Single sign-on with your organisation's own login is supported.
We're running a supplier security check. What can you provide?
A data processing agreement and security documents, on request. The platform is tested regularly by outside security testers.
Will you tell us about a security incident?
Yes, within a set time.
Do you sell or share our data?
No. We never sell your data or pass it on for anyone else's use.
Related pages
See Convivo Connect on your own vehicles and assets
Book a demo and we'll walk through what matters to you, or tell us about your fleet or project and we'll prepare a quote. We reply within one working day.
Prefer to talk? Call +385 1 3667 666