HomeTrust Center
Security YouCan Verify.
Organizations in healthcare, finance, government and education put our technology on their networks and in front of the public. We don't ask them to take our word for it. Here is how our software platforms are audited, tested and run, and how to get the reports.
01 / Independent assurance
IndependentlyAudited toSOC 2 Type II.
SOC 2 is an auditing framework from the American Institute of Certified Public Accountants (AICPA). A Type II audit goes further than a point-in-time check: the auditor samples evidence across an observation period of several months to test whether our controls operated effectively the whole time.
Our MediaTile and firmChannel software platforms are independently audited to SOC 2 Type II by a licensed CPA firm. The latest report carries an unqualified opinion, with no exceptions noted.
What the audit covers
- 01The cloud infrastructure that hosts each platform
- 02User authentication and access controls
- 03How data is stored and transmitted
- 04How software is developed, changed and released
- 05Vulnerability management and incident response
- 06Our people: hiring, security training and removing access when someone leaves
SOC 2 reaches beyond engineering into how the whole company is run, which is why every team at Corum Digital took part.
02 / Independent testing
Penetration TestedEvery Year.
01/ year
An independent third-party firm tests our platforms once a year, attempting to break in the way a real attacker would. The latest test found no Critical or High issues. We share the full report, not a summary letter.
03 / Data protection
How We ProtectYour Data.
Security controls that support how our platforms are hosted, accessed and operated.
Hosted in Canada and the US
Our software platforms run on AWS. Canadian customers' data is hosted in Canada, and US customers' data in the US.
Kept apart
Every customer has its own private database and its own sign-in. If a set of credentials ever leaked, it would reach one organization and nothing else.
Encrypted
Data is encrypted at rest with AES-256 and in transit with TLS 1.2 or higher, and our policy is that nothing is stored unencrypted.
AI and third parties
Some AI features rely on third-party providers, so their processing isn't guaranteed to stay in Canada or the US. If that matters to your organization, talk to us before you deploy.
Insured
Corum Digital carries cyber liability insurance.
A word from our CTO
"Digital signage platforms connect to corporate networks, integrate with business data, and operate in public-facing environments. We built our platform around [security as a core engineering requirement] from the start."
04 / Our platforms
Securityby Brand.
| Brand | What it is | Security details |
|---|---|---|
| MediaTile | Digital signage software | MediaTile security and safety |
| firmChannel | Digital signage platform for resellers | firmChannel security |
| humanKIOSK | Kiosk hardware | Runs the software you choose; ask us about the platform it will run |
| Corum View | LED display hardware | Runs the software you choose; ask us about the platform it will run |
Our SOC 2 Type II audit covers the MediaTile and firmChannel software platforms. humanKIOSK and Corum View are hardware brands.
05 / Request documentation
Request OurSOC 2 Report.
Our SOC 2 Type II report is available to customers and prospective customers under a non-disclosure agreement. Tell us who should receive it and we'll be in touch. We can also send our latest penetration test report and complete your vendor security questionnaire.
Reports are shared under a non-disclosure agreement.
Prefer email? Write to security@corumdigital.com.
06 / Frequent questions
Questions SecurityTeams Ask.
Is SOC 2 a certification?
No. SOC 2 is an independent audit that ends in a report from a licensed CPA firm. Our MediaTile and firmChannel platforms are audited to SOC 2 Type II, and the latest report notes no exceptions.
Which products does the SOC 2 report cover?
The MediaTile and firmChannel software platforms, including the cloud infrastructure that runs them and the company processes behind them.
How often are your platforms penetration tested?
Once a year, by an independent third-party firm.
Where is our data hosted?
On AWS, in Canada for Canadian customers and in the US for US customers.
Can another customer see our data?
No. Every customer has its own private database and its own sign-in.
How do I get the reports?
Use the request form on this page or email security@corumdigital.com. The SOC 2 report is shared under NDA.
How do I report a security issue?
Email security@corumdigital.com.