Battle Tested Charting Cybersecurity: Secure, Reliable, Compliant

No, SciChart does not store, process, or transmit sensitive data. The library only renders data provided by the host application, ensuring that data handling and storage remain entirely within your control.

SciChart adheres to best practices in secure software development, including secure coding, rigorous testing, and vulnerability management. While it does not handle sensitive data directly, SciChart operates within secure environments like Azure which are ISO 27001, SOC 1 and SOC 2/SSA, Sarbanes-Oxley (SOX), PCI Level 1, and FISMA Moderate compliant and can provide robust documentation to assist with compliance requirements.

SciChart conducts regular code reviews, automated and manual testing, and uses scanning tools to identify vulnerabilities. In the event of a significant security issue, we notify affected users via email and publish updates promptly on the latest releases and changelogs.

Yes, SciChart is ideal for use in highly regulated industries. It integrates seamlessly into applications that need to comply with regulations like HIPAA (healthcare), FISMA (government), and GDPR (finance), with its minimal security cross-section ensuring secure operation. SciChart is actively in use by NATO allies, Aerospace, Finance and leading healthcare platforms used by millions of people globally. Upon request, we can provide completely air-gapped licensing, source code provision as well as accommodate Government Purpose Rights.

SciChart releases major updates annually and minor updates quarterly, with nightly builds available for early adopters. Security patches are included in updates as soon as they are available and can be accessed through secure package management systems like NuGet, npm, Maven and Swift package managers. As well as updating releases annually and quarterly, we publish critical hotfixes within days.

All SciChart updates are delivered as full versions. Instructions for downloading and integrating the latest version are in the documentation. The recommended way to get SciChart is via a package management system (such as NuGet for WPF) which tells you if updates are available.

SciChart uses minimal 3rd party dependencies. The full list is available on request. These are packaged within the SciChart libraries and do not need to be managed separately by the customer or end user. We monitor the relevant channels for all our dependencies and integrate security updates immediately, and other updates as appropriate.

The expected lifecycle is the same as the relevant frameworks on which the various platforms are built (such as.net for WPF). Note that updates and fixes are generally applied to the latest SciChart version only. Notices of end of support are posted at SciChart News and emailed to activated developers.