I was in contact with our Data Security officer to provide you with a precise answer. In addition to the encryption, if the access is public, there must be a dual-authentication factor in place.

Alternatively, if the access is “local”, it can be simply with username and password. Based on his input the option we have right now for Zoho are:

1-Embed a dual factor authentication in Zoho or,

2-Create a rule at Zoho’s firewall allowing traffic only from our IPs ß that should be easy. or

3-Run Zoho in-house.

Ian, talk to your engineers and get back to me on how they see it.

Thank you and I am sorry I didn’t get back to you sooner.

Regards,

_CK