Cyber Security Policy
Information Security & Data Protection Overview
Last updated: March 2026
This document provides an overview of the security and data protection measures implemented by BESTMIX Software NV and BESTMIX Software Inc. (“BESTMIX”).
1. Governance & Organization
BESTMIX maintains a formal Information Security Governance structure:
- Chief Information Security Officer (CISO)
- Two Information Security Officers (ISO)
- Dedicated system and cloud engineering teams
We operate under a structured security framework aligned with:
- SOC 2 Type II (independently audited)
- GDPR (where applicable)
- Microsoft Azure security best practices
Regular security awareness training is mandatory for employees.
Access to systems follows a strict Role-Based Access Control (RBAC) model and least-privilege principle.
2. Compliance & Assurance
BESTMIX is SOC 2 Type II compliant, demonstrating:
- Ongoing effectiveness of security controls
- Independent third-party audit verification
- Continuous operational compliance
Upon request and under NDA, additional compliance documentation may be made available.
3. Infrastructure Security
Data Centers
- Primary infrastructure hosted in Microsoft Azure (EU and US regions)
- European customer data hosted in EU regions unless contractually agreed otherwise
- Azure regions are geo-redundant and paired
- Physical data center security managed by Microsoft
On-premises infrastructure (where applicable):
- Redundant systems
- UPS and generator backup
- Controlled physical access
4. Identity & Access Management
- Unique user IDs for all employees
- Multi-Factor Authentication (MFA) mandatory
- Azure Active Directory with Conditional Access
- Identity Protection risk detection
- Automated deprovisioning upon termination
- Logging of all authentication attempts
Customer applications use Azure AD B2C or customer-managed identity providers.
5. Network Security
- Multiple redundant internet connections
- Enterprise-grade firewall protection
- VPN-only access to internal network
- No direct inbound application exposure
- Secure publication via Azure AD Proxy
- Wireless access via Radius authentication
6. System Security
Server Security
- Host-based firewalls
- Endpoint protection
- Weekly security patching
- Automated patch management via Azure Update Manager
Endpoint Security
- Windows Enterprise managed via Microsoft Intune
- Device compliance enforcement
- Full disk encryption (BitLocker)
- Remote wipe capability
7. Backup & Business Continuity
- Full system backups (weekly)
- Differential backups (daily)
- Azure database point-in-time backups
- Backups stored both on-premises and in cloud
- Redundant Azure architecture
- Separate production, acceptance, development and test environments
8. Customer Applications
BESTMIX Recipe Management
- Hosted as Azure PaaS
- Separate database per customer
- TLS 1.2+ encrypted communication
- Elastic Pool redundancy
- Load-balanced Azure Web Apps
BESTMIX ERP Suite
- Built on Microsoft Dynamics 365 (SaaS)
- Security, availability and governance per Microsoft standards
- Customer controls identity and backup settings
- BESTMIX access only via explicit delegated permissions
BESTMIX Quality Control, SpecTrack & Customer Hub
- Hosted on Microsoft Azure
- Web-based (HTTPS only)
- Azure AD B2C authentication
- No open inbound firewall ports required
9. Data Protection & Privacy
BESTMIX processes personal data in accordance with:
- GDPR (where applicable)
- Applicable US privacy laws
Customer data processing is governed by contractual Data Processing Agreements.
10. Incident Response
BESTMIX maintains an incident response process including:
- Detection and containment
- Root cause analysis
- Corrective measures
- Customer notification where contractually or legally required
11. Continuous Improvement
Security controls are reviewed periodically and updated in response to:
- Emerging threats
- Technological developments
- Audit findings
- Regulatory changes
Personalisation
See the current personalisation segmentation scoring or apply a manual segmentation to test