Security is part of how we build and run each service.
01 Practices
Least-privilege access, with administrative access kept separate from everyday accounts.
Our services are served over HTTPS.
Code changes are reviewed before release, including AI-assisted security review.
Production systems are logged and monitored, and alerts are followed up.
Software and dependencies are kept up to date, and issues are fixed in order of impact.
We keep only the data a service needs, for as long as it is needed.
02 Governance
Security at Sage Inc. is overseen by the company's Security Lead, who is responsible for security policy, review of significant changes and incident response.
Leadership →