Information Security

Camunda has received a clean SOC 2 Type 1 attestation report. This is a rigorous, independent assessment of our internal security controls.

In a recent blog post, I described a use case based on facial image recognition to perform an authentication task. In an ideal process, the recognition system either passes or fails the recognition task and the process proceeds via straight through processing to completion. In practice there is a fuzzy boundary between these two outcomes where human judgment via a human task is injected into the process. Now consider the case where say an image of a driver license is used as a reference image. This image contains particularly sensitive information. Hence if a user is required to access this image, have we taken all reasonable steps to protect this information and provide access on a need to know basis?...