Welcome to SIGNL4's Trust Center. Our commitment to data privacy and security is embedded in every part of our business. Use this SIGNL4 Trust Center to learn about our security posture and request access to our security documentation.
BASF
EDEKA
BER – Berlin Brandenburg Airport
Daimler Truck
Scania Group
ICON Robotics
Gift of Hope Organ & Tissue Donor Network
Verdun Oil Company
Cumberland Mutual
Syracuse University
Mar-Bal
Netsmart
SoCura
Stadt Wuppertal
Swiss Bankers
Amano McGann
PBF Energy
BSH Home Appliances
Risk Profile
We have secure, reliable hosting that customers can depend on. We are happy to provide details about our risk mitigation practices and recovery objectives upon request.
Self-Assessments
We are working on our security compliance. We can provide completed questionnaires upon request.
App Security
We take application security seriously and are putting together a program to monitor internal apps.
ESG
We prioritize and take environmental, social, and governance (ESG) considerations seriously in our operations and decision-making processes.
Data Privacy
Privacy of customer data is top of mind. We follow industry best practices and follow all applicable privacy regulations.
Access Control
Access is tightly monitored and controlled at our company. We are happy to provide more details about our access control practices upon request.
Endpoint Security
We follow industry best practices for endpoint security. We are happy to provide more details about our endpoint security practices upon request.
Network Security
We protect our corporate network against external & internal threats.
Corporate Security
We implement internal measures and practices to maintain a high standard of security.
Policies
We are currently working with experts to put together our company policies. Please contact us for more details.
Security Grades
We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.
Incident Response
We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request.
Risk Management
We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.
Asset Management
We have strict asset management policies in place to ensure that all assets are accounted for and secure.
Training
We provide security awareness training to all employees to ensure that they are aware of security best practices.
Change Management
We have a change and configuration management process in place to ensure that changes are properly reviewed and approved.
Physical & Environment
We have physical and environmental controls in place to ensure that our data centers are secure and reliable.
Continuous Monitoring
We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.
Subprocessors
Trust Center Updates
Vulnerability Advisory: DERDACK Products Not Affected by PHP2Shell Vulnerabilities
Security Advisory: DERDACK Products Not Affected by PHP2Shell Vulnerabilities
October 22, 2026
DERDACK confirms that its products are not affected by the recently disclosed critical PHP vulnerabilities, commonly referred to as "PHP2Shell."
On October 21, 2026, the PHP development team disclosed security vulnerabilities that could potentially allow remote code execution (RCE) on affected PHP-based systems.
DERDACK products are not vulnerable to these security issues because they do not use PHP as part of their application architecture. Consequently, the vulnerabilities do not apply to DERDACK products, and no product updates or mitigation measures are required.
At DERDACK, security remains a top priority. We continuously monitor emerging security threats and assess their potential impact on our solutions to ensure the security and reliability of our products.
Reference: