How is employee access managed?
amaise follows a strict lifecycle for employee access:
Onboarding: Before granting any access, identity verification and background checks (including criminal record checks for employees with access to production data) are conducted by an existing team member. Accounts are created following the principle of least privilege. External employees receive access only to the development environment — never to production systems.
Ongoing: Quarterly access reviews cover all cloud credentials, MFA status, and service accounts. AWS credentials are rotated every 90 days.
Offboarding: Upon any contract termination — voluntary or involuntary — all access is immediately revoked following a prioritized schedule:
Immediately: Cloud credentials disabled and deleted, authentication service accounts locked
Same day: Code repositories, infrastructure, and internal tools
Within 24 hours: Monitoring and compliance services
In case of security incidents, all access is revoked immediately before the offboarding meeting begins.