Secure application and
integration
MyDesk uses formal change management, Microsoft Graph with least privilege and logical isolation between customers to ensure application and integration security.
Secure software development
MyDesk follows a structured SDLC (Software Development Life Cycle) with security integrated in all phases. Code changes go through peer review, automated security scans and testing before deployment to production.
Change Management
All changes to the production environment follow a formal change management process that includes:
- Documented change request with risk assessment
- Approval from relevant stakeholders
- Test in a staging environment before production
- Rollback plan in case of failure
- Post-deployment verification
- Audit log of all changes
Microsoft Graph and API security
MyDesk integrates with Microsoft 365 via the Microsoft Graph API with the least privilege principle. We only request the specific Graph rights needed to deliver the service. All API calls are logged and monitored.
Logical isolation between customers
In MyDesk's multi-tenant architecture, all customers are logically isolated. Customer data is segregated at the database level with row-level security, and application logic ensures that one customer's data is never accessible to another.
Vulnerability management
MyDesk performs regular vulnerability scans of the application and infrastructure. Identified vulnerabilities are prioritized and handled in accordance with our patch management procedure.
Application security
- Change management formula
- Peer review of code changes
- Automated security scans
- Microsoft Graph - Least privilege
- Logical isolation between customers
- Regular vulnerability scans
- Documented APIs
Security in code and integration
Change Management
Formal approval process for all changes to the production environment.
API security
Microsoft Graph with least privilege and documented API integrations.
Insulation
Logical isolation between customers at the database level with row-level security.
Do you have any questions?
Contact our Security Team directly - we answer security, compliance and documentation questions quickly and accurately.
