Trust & Security
Your training data, secured.
How Prodigy EMS protects your training records, employee data, and certifications, built for the privacy and reliability EMS organizations require.
Powered by infrastructure you can trust
SOC 2
Type II program in progress via Vanta.
AWS hosting
Hosted on AWS in U.S.-based data centers.
Encryption
Encrypted in transit (TLS 1.2+) and at rest (AES-256).
US data residency
Data stored in the United States.
Redundant deployment
A redundant deployment in separate AWS infrastructure, designed to keep Prodigy available even during a widespread AWS outage.
Encrypted backups
Encrypted backups of customer data with documented restore procedures.
Our security program
How we protect your data
Infrastructure security
Hosted on AWS in the United States. Encrypted in transit with TLS 1.2 or higher and at rest with AES-256.
Access controls
Single sign-on (SSO/SAML), multi-factor authentication, and role-based permissions for administrative access, with periodic reviews of production access.
Application security
Automated vulnerability scanning across code, dependencies, and runtime via Aikido, Dependabot, and CrowdStrike. All code changes go through review and protected branches.
Penetration testing
We engage a third party to perform annual penetration testing as part of our security and compliance program.
Monitoring & incident response
Continuous automated monitoring with on-call response. We maintain a documented incident response plan and notify affected customers in line with our contractual and regulatory commitments.
Resilience & availability
A redundant deployment in separate AWS infrastructure is designed to keep Prodigy available even during a widespread AWS outage. Encrypted backups with documented restore procedures.
Data handling
Data classification, retention, and deletion procedures aligned with our SOC 2 program. Encrypted backups with documented restore procedures.
Vendor management
We review critical third-party vendors and require security and privacy commitments from providers that handle customer data.
Employee practices
Confidentiality agreements and a code of conduct for all employees, plus ongoing security awareness training as part of our SOC 2 program.
Privacy & data subject rights
We honor data subject access, correction, and deletion requests. See our Privacy Policy for full details.
Real-time system status
We believe in transparency about our uptime. Our public status page shows real-time system status and incident updates.
Request security documentation
Evaluating Prodigy for your department or organization? We're happy to share additional security documentation to support your review.
Reporting security issues
Found a security issue? We appreciate responsible disclosure. Please email our security team and we will acknowledge reports promptly and coordinate a fix.
security@prodigyems.com