Cryptography

Glesys applies cryptographic controls for protecting sensitive information and communications.

Key elements:

• Encryption standards: Data in transit protected using TLS (minimum TLS 1.2+) and sensitive data protected with strong encryption (e.g., AES-256 or equivalent) where applicable.

• Key management: Keys are managed securely, rotated at least annually or after suspected compromise, and protected from plaintext storage in code or configurations.

• Hashing/signatures: Approved hashing algorithms (e.g., SHA-256+) and prohibition of weak algorithms (e.g., MD5/SHA-1).