Security

Cyber Security at Lightbend

We understand Akka is an essential part of systems built and operated by our customers with significant security and confidentiality needs. Lightbend is committed to maintaining the security and confidentiality of your data through the integrity of our products. Below we outline the appropriate policies, procedures, and controls we have in place for keeping your data safe.

• Security practices
  • Encryption of sensitive information in-transit and at rest using industry-standard encryption algorithms and protocols.
  • Data access via role-based access controls and multi-factor authentication, ensures only authorized individuals have access.
• Regular security audits
  • Internal and external security audits.
  • Processes and procedures ensure ongoing compliance with industry standards, as described on our Compliance Page.
• Monitoring
  • Continual monitoring of all systems detects potential security threats in real time.
  • A comprehensive and regularly tested plan ensures incidents are detected and isolated.
  • Ensures our ability to maintain our commitments to our customers.

As our business is software, we take particular care with our software development lifecycle, specifically:

• Security. An essential element of each aspect of our development, testing, and deployment operations.
• Our Team. We have a world-class team of screened and verified experts, with the right tools and knowledge.
• Outside vendors. We require all third parties, vendors, and contractors we use to be vetted thoroughly, and they satisfy us as to their practices before we share any information with them.
• Data protection and privacy regulations. We track and comply with relevant regulations, both in the U.S. and internationally.
• Team training.
  • All Lightbend employees undergo regular training on the principles and practices of our security program and acknowledge their responsibilities under our policies.
  • Automated and human factors have been implemented to stay vigilant against social and technical attacks.
• Distributed and Resilient Environment.
  • Fully distributed infrastructure and extensive endpoint protection ensure the entire supply chain remains trusted, from mobile devices to workstations to servers.
  • Redundant encrypted copies of data are maintained to ensure resiliency in the event of an outage whether a supplier or communications infrastructure.
  • Require all our systems to be kept up-to-the-minute on patches and upgrades.
• Secure Supply Chain.
  • Akka is part of a secure and safe supply chain we have developed for our customers.
• Risk Management and Transparency.
  • We track all potential risks to ensure they are handled appropriately and rapidly.
  • Place a priority on continual improvement and communication of all security incidents to our customers.

Akka Security Features

Akka provides many features that make it easier for our customers to build systems operating in the most secure environments. Please see the Security section in the Akka documentation for details.

If you have any questions or concerns about our program, please contact us at security@lightbend.com or via our support channels.