|
| 1 | +"""Security page data configuration.""" |
| 2 | + |
| 3 | +# Feature data organized by category |
| 4 | +SECURITY_FEATURES = { |
| 5 | + "Data Protection": [ |
| 6 | + ("Data Encryption", "AES-256 encryption at rest, TLS 1.2+ in transit."), |
| 7 | + ("Database Backups", "Daily encrypted backups with 30-day retention."), |
| 8 | + ("Data Segregation", "Customer data is logically isolated per tenant."), |
| 9 | + ], |
| 10 | + "Product Security": [ |
| 11 | + ("Penetration Testing", "External tests conducted annually."), |
| 12 | + ("Secure Development Lifecycle", "Code reviews, linting, and security scans."), |
| 13 | + ("Dependency Management", "Automated scanning for vulnerabilities."), |
| 14 | + ], |
| 15 | + "Enterprise Security": [ |
| 16 | + ("SSO/SAML", "Supports major identity providers for centralized auth."), |
| 17 | + ("Granular Permissions", "Role-based access control across teams."), |
| 18 | + ("Audit Logs", "Track every access and change in the system."), |
| 19 | + ], |
| 20 | + "Data Privacy": [ |
| 21 | + ("GDPR & CCPA Ready", "Compliant data handling and user rights."), |
| 22 | + ("Data Deletion Requests", "Users can request full data erasure."), |
| 23 | + ("Privacy by Design", "Privacy baked into product architecture."), |
| 24 | + ], |
| 25 | +} |
| 26 | + |
| 27 | +# Trust services criteria for the grid cards |
| 28 | +TRUST_SERVICES_CRITERIA = [ |
| 29 | + { |
| 30 | + "title": "Security", |
| 31 | + "description": "Protection of systems and data from unauthorized access through firewalls, multi-factor authentication, and continuous monitoring.", |
| 32 | + "icon": "shield", |
| 33 | + }, |
| 34 | + { |
| 35 | + "title": "Availability", |
| 36 | + "description": "Ensures that systems are operational and accessible as promised, with redundancy, failover systems, and uptime monitoring in place.", |
| 37 | + "icon": "globe", |
| 38 | + }, |
| 39 | + { |
| 40 | + "title": "Confidentiality", |
| 41 | + "description": "Restricts access to sensitive information using encryption, role-based access controls, and secure data handling policies.", |
| 42 | + "icon": "backend_auth", |
| 43 | + }, |
| 44 | + { |
| 45 | + "title": "Processing Integrity", |
| 46 | + "description": "Guarantees that system operations are accurate, timely, and authorized, using code reviews, automated tests, and deployment controls.", |
| 47 | + "icon": "code_custom", |
| 48 | + }, |
| 49 | + { |
| 50 | + "title": "Privacy", |
| 51 | + "description": "Covers the collection, use, retention, and disposal of personal information according to regulatory and contractual obligations.", |
| 52 | + "icon": "clipboard", |
| 53 | + } |
| 54 | +] |
| 55 | + |
| 56 | +# Page content configuration |
| 57 | +PAGE_CONTENT = { |
| 58 | + "title": "Security, Compliance, and Trust at Reflex", |
| 59 | + "subtitle": "We're committed to protecting your data through enterprise-grade security practices and full SOC 2 compliance.", |
| 60 | + "showcase": { |
| 61 | + "title": "Secure by default", |
| 62 | + "subtitle": "SOC 2 compliant with enterprise-grade security and flexible deployment options.", |
| 63 | + "logos": [ |
| 64 | + {"src": "/soc2.webp", "alt": "SOC 2 Compliance"}, |
| 65 | + {"src": "/databricks-partner.svg", "alt": "Databricks Partner"} |
| 66 | + ] |
| 67 | + }, |
| 68 | + "table": { |
| 69 | + "title": "Enterprise-Grade Security at Every Layer", |
| 70 | + "description": "From data protection to privacy compliance, Reflex is built with security-first principles to meet the needs of modern teams and enterprises." |
| 71 | + } |
| 72 | +} |
0 commit comments