Environment
1.	Can you describe your hosting environment? Is it On-Premise or Cloud? Will you be using Azure, AWS, or other/self-hosted?
AWS
2.	What software/platform did you use to write your application?
AWS, Angular, NodeJS
3.	Is our data stored in a different database than other users of the same product? In other words, how is the security and integrity of our solution separate from other customers?
Multi Tennant database
4.	Do you have enough capacity to handle us as a customer?
Yes
5.	What is your plan for increasing storage and capacity to support us and other customers in the future?
All systems for this application have the ability to scale either manually or automatically.
6.	Describe your Network Architecture Design.
A combination of microservices and serverless systems to handle a global scale IoT system.
7.	Describe your Firewall Configuration and any checks you do.

Data Center and Security
8.	Where is your data center?
AWS US-East-1
9.	Is the data also located in a secondary site?
No, however DR can be stood up in another environment in case of a major outage.
10.	How often is the data backed up?
Daily for 30 days, monthly out to a year
11.	Do you have a DR(Disaster Recovery) plan in place? Have you ever had to execute your DR plan?
Yes, we have a DR plan. We have not had to execute it but we do fire drills for key systems.
12.	What is your uptime rate?
Roughly tracks with AWS.
13.	How do we deal with speed complaints?
These are feature improvement requests to the product management team.
14.	Who has access to our data?
Just Hunter and those the customer shares access to.
15.	Is the data entered into your system encrypted?  Is it transmitted through secure means?  Please describe how the integrity of the data is protected in your system during entry, transmission, storage, and retrieval.
Everything is transmitted over TLS 1.2 or greater over MQTTs or HTTPs. Data is not encrypted at rest, however not PII.
16.	Do you use Intrusion Detection Systems Evaluation (IDS) or Intrusion Prevention Systems (IPS)?
(This is a question for Nathan McNamara
17.	Do you have regular Vulnerability Assessments or do Penetration Testing?
We contract these through Security Innovation as needed, we are implementing automated pen tests in our continuous integration environment.
18.	Have you ever had a data breach? Describe the incident and what was done to resolve it.
No
19.	Describe Secure Remote Access Protocols (ex. Virtual Private Network (VPN)) you utilize.
Just MQTTs and HTTPs.
20.	If you allow uploads, and links, are file/links scanned?
We do not allow uploads.
Data
21.	Who owns the data that you are hosting? Our general intent in asking this question is that WE retain ownership of the data and reserve the right to request and receive it on demand.
Hunter Industries owns the data.
22.	How do we export the data ; is there a tool? In the admin console? Are we responsible? Is it SQL, database?
You cannot export the data."