Common use of Secure Development Clause in Contracts

Secure Development. NetDocuments’ Software Development Life Cycle (SDLC) methodology governs the acquisition, development, implementation, configuration, maintenance, modification, and management of software components. NetDocuments developers use secure coding guidelines based on leading industry standards and receive annual secure coding training. For each release, NetDocuments performs a security architecture review and conducts vulnerability scans and dynamic and static code reviews in the development environment. Identified vulnerabilities and coding defects are resolved prior to implementation, and an internal rollout is performed to test and troubleshoot the product release prior to placing it in production. NetDocuments utilizes a code versioning control system to maintain the integrity and security of application source code. Access privileges to the source code repository are reviewed quarterly and limited to authorized employees.