Post Ops Pro powers the operational nerve center of your post-production facility. We take that responsibility seriously. This page outlines how we protect your data, your team, and your business.
Infrastructure
Post Ops Pro is hosted on enterprise-grade cloud infrastructure operated by industry-leading providers including Amazon Web Services, Google Cloud Platform, and Microsoft Azure. These providers maintain certifications including SOC 2 Type II, ISO 27001, ISO 27017, ISO 27018, and PCI DSS. Physical security, redundant power, environmental controls, and disaster recovery are all handled at the infrastructure layer by these providers.
Encryption
All connections to Post Ops Pro are encrypted using TLS 1.2 or higher. Customer data is encrypted at rest using AES-256 encryption. Authentication credentials are hashed using industry-standard algorithms — we never store passwords in recoverable form.
Access Controls
Access to production systems is limited to a small number of authorized Iron Lion personnel and is granted on a least-privilege basis. All access is logged and reviewed regularly. We require strong authentication for all administrative access, including multi-factor authentication for systems handling customer data.
Backups and Recovery
Customer data is backed up automatically on a daily basis. Backups are encrypted and stored in geographically separate locations from the primary infrastructure. We test backup restoration regularly to ensure we can recover quickly in the event of a system failure.
Tenant Isolation
Post Ops Pro uses logical isolation to ensure each customer's data is separated from every other customer's. For facilities with stricter requirements, we offer dedicated single-tenant deployments where your data and application instance run on infrastructure that no other customer touches. We also offer on-premise installations for organizations that require their data to remain entirely within their own infrastructure.
Monitoring and Incident Response
Our infrastructure is continuously monitored for performance, availability, and security events. We maintain documented incident response procedures and will notify affected customers without undue delay in the event of a security incident that materially impacts their data, in accordance with applicable law.
Application Security
Post Ops Pro is built using modern, well-maintained frameworks and follows secure-development best practices. We maintain a software inventory, monitor dependencies for known vulnerabilities, and apply security updates promptly. We follow OWASP guidance for web application security.
Vendor Management
We carefully evaluate the security posture of third-party vendors that handle customer data and require them to adhere to security and privacy standards consistent with our own. A list of sub-processors is available on request.
Compliance
Iron Lion is committed to meeting the security and compliance expectations of post-production facilities of all sizes. For Enterprise customers, we are happy to provide custom security questionnaires, sign data processing addenda (DPAs), and walk through our architecture and controls in detail. Contact us to start the conversation.
Reporting a Vulnerability
If you believe you have discovered a security vulnerability in Post Ops Pro, please report it to us responsibly at the address below. We appreciate the security research community's efforts and will respond promptly to legitimate reports.