Security and protection of officials’ data
A protocol department works with sensitive information. Stela protects officials’ data with profile-based access control and several layers of security.
Spanish National Security Framework certification
The information systems supporting the development, implementation and maintenance of Stela have been audited and certified as compliant with the Spanish National Security Framework (ENS), at medium category, under Royal Decree 311/2022. The ENS is the reference framework for services used by public administrations.
- Certificate no. 34/5704/24/10260, issued by OCA Instituto de Certificación
- Certified since 21 October 2024
- Valid until 21 October 2028
Hosted in the Microsoft Azure cloud
Stela is hosted in the Microsoft Azure cloud in Western Europe. Each client’s data is stored in separate databases, with the option of a dedicated instance.
Secure access
Access can be protected with two-factor authentication using an authenticator app or FIDO2 and YubiKey security keys, and with corporate single sign-on (SSO).
- Two-factor authentication with an authenticator app
- FIDO2 and YubiKey security keys
- Corporate single sign-on (SSO)
Passwords and devices
Each organisation configures password expiry and history. The public portal records known devices and blocks access by IP address after failed attempts.
Permissions and auditing
Granular roles and permissions, event-specific profiles and private records limit who can see each item of data. An audit log records changes field by field, including who made them and when.
Consent and unsubscribing from communications
Stela records consent or opt-outs by person and email, and provides a public option to unsubscribe from communications.
Discover Stela in a demonstration
We will show you how Stela can help you organise more effective, secure and memorable events.
Request a demo