Question 1

What is EAL4+ Common Criteria certification?

Accepted Answer

EAL4+ (Evaluation Assurance Level 4 Augmented) is the highest level of security assurance that is practically achievable for commercial products. It requires methodical design, testing, and review by independent evaluators. This certification is recognized by 31 governments worldwide through the Common Criteria Recognition Arrangement (CCRA) and is often required for deployment in classified government networks.

Question 2

What security certifications does TR7 hold?

Accepted Answer

TR7 maintains comprehensive security certifications including EAL4+ Common Criteria (recognized by 31 governments), ISO 27001:2022 (Information Security Management), ISO 9001:2015 (Quality Management), SOC 2 Type II (Service Organization Controls), PCI DSS v4.0 compliance for payment security, GDPR compliance for EU data protection, compliance for Turkish data protection requirements.

Question 3

How does TR7 help with regulatory compliance?

Accepted Answer

TR7 solutions help organizations achieve compliance across multiple regulatory frameworks including healthcare (HIPAA, HITRUST), financial services (PCI DSS, SOX, GADCA), government (FedRAMP, FISMA, NIST 800-53), and data privacy (GDPR, CCPA). Our certified products provide the security controls required by these frameworks, and our compliance team assists with documentation and audit support.

Question 4

How often are TR7's security certifications audited?

Accepted Answer

TR7 undergoes annual independent security audits to maintain our certifications. ISO 27001 and ISO 9001 require annual surveillance audits with full recertification every three years. SOC 2 Type II examinations cover a 12-month period and are performed annually. Our Common Criteria certification is revalidated with each major product release to ensure continued compliance with the latest security requirements.

Question 5

Can I access TR7's compliance documentation and audit reports?

Accepted Answer

Yes, compliance documentation including SOC 2 reports, ISO certificates, and security attestations are available to customers and qualified prospects under NDA. Contact our security team to request access to specific documentation. Our sales and security teams can also provide compliance mapping documents showing how TR7 solutions address specific regulatory requirements.

Question 6

Is TR7 suitable for government and defense deployments?

Accepted Answer

Yes, TR7's EAL4+ Common Criteria certification makes our products suitable for deployment in government and defense environments that require high-assurance security solutions. Our certification is recognized by 31 governments through the Common Criteria Recognition Arrangement, including NATO member countries. We have successful deployments in critical national infrastructure and defense sector organizations worldwide.

Question 7

What does ISO 27001:2022 certification provide?

Accepted Answer

ISO 27001:2022 is the international standard for information security management systems. It provides a systematic risk management framework, a continuous security improvement process and protection of confidential information assets. Annual surveillance audits are conducted by accredited bodies. Full re-certification is required every three years.

Question 8

What is the difference between SOC 2 Type II and Type I?

Accepted Answer

SOC 2 Type I evaluates the design of controls at a specific point in time, while SOC 2 Type II evaluates the effectiveness of controls over an extended period (typically 12 months). TR7 has undergone a SOC 2 Type II examination, which provides more comprehensive assurance. This proves that our security controls operate effectively on a continuous basis.

Question 9

Does TR7 support healthcare-sector compliance?

Accepted Answer

Yes — TR7 solutions are designed to meet healthcare-sector compliance requirements including HIPAA, HITRUST and FDA 21 CFR Part 11. Patient-data protection, secure data handling and audit-trail capabilities are provided. Compliance documentation is available for healthcare providers.

Question 10

What does TR7 cover for PCI DSS v4.0 compliance?

Accepted Answer

TR7 is designed to meet PCI DSS v4.0 web application security (Requirement 6) and network security controls (Requirement 1). Our Web App & API Protection (WAAP) solution provides cardholder-data protection, secure transaction handling and network segmentation. It has been validated by a Qualified Security Assessor (QSA).

Question 11

What does TR7 offer for GDPR compliance?

Accepted Answer

TR7 delivers full compliance with Turkey's Personal Data Protection Law (GDPR). It offers VERBİS registry support, data processing agreements and local data residency options. It guarantees the proper handling and protection of personal data for Turkish organizations and citizens.

Question 12

Why are certifications important for enterprise security?

Accepted Answer

Certifications deliver four critical values: regulatory compliance (meeting industry-specific requirements), risk reduction (independently validated security controls), customer trust (transparent third-party security validation) and competitive advantage (important security credentials for enterprise buyers). Independent audits prove the validity of security claims.

Question 13

What are TR7's compliance mapping documents?

Accepted Answer

Compliance mapping documents are detailed materials that show how TR7 solutions meet specific regulatory requirements. They explain how TR7 features are applied for each control item. These documents are used for audit preparation and compliance reporting. They are available for customers and prospects under NDA.

Question 14

Which financial-services regulations does TR7 support?

Accepted Answer

TR7 supports financial-services regulations including PCI DSS (payment-card security), SOX (Sarbanes-Oxley), GADCA (Gramm-Leach-Bliley Act) and MAS TRM (Monetary Authority of Singapore Technology Risk Management). WAAP, DDoS protection and access control features help financial institutions meet their compliance requirements.

Simplicity

Performance

Security

Affordable & Cost-Effective

Tailor Made

Modern Technology

Enterprise Customer Licensing

Service Provider Licensing

Deliver & Accelerate

Protect Apps & APIs

Access & Identity

Data Protection

Compliance

Learn & Discover

Education & Training

Advisories, disclosures & threat protection

Developer Tools

Channel Partnership Program

Ambassador Program

Tailor-made Solutions

Enterprise Security Certifications

EAL4+ Common Criteria

ISO 27001:2022

ISO 9001:2015

PCI DSS v4.0

SOC 2 Type II

Compliance Support

Healthcare

Financial Services

Government

Data Privacy

Detailed Compliance Documentation

PCI DSS Compliance Whitepaper

Ready to Secure Your Enterprise?