{"id":5368,"date":"2026-05-25T13:07:42","date_gmt":"2026-05-25T13:07:42","guid":{"rendered":"https:\/\/aliteo.com\/?page_id=5368"},"modified":"2026-05-27T10:25:10","modified_gmt":"2026-05-27T10:25:10","slug":"bezpecnost-a-sukromie","status":"publish","type":"page","link":"https:\/\/aliteo.com\/sk\/bezpecnost-a-sukromie\/","title":{"rendered":"Bezpe\u010dnos\u0165 a s\u00fakromie"},"content":{"rendered":"\n
<\/div>\n\n\n\n

Bezpe\u010dnos\u0165 a s\u00fakromie<\/h1>\n\n\n\n

Bezpe\u010dnos\u0165 je pre ALITEO neoddelite\u013enou s\u00fa\u010das\u0165ou v\u00fdvoja, nie dodato\u010dnou vrstvou. Tento dokument je ur\u010den\u00fd pre z\u00e1kazn\u00edkov, partnerov a bezpe\u010dnostn\u00e9 t\u00edmy, ktor\u00e9 potrebuj\u00fa porozumie\u0165 tomu, ako ALITEO chr\u00e1ni ich d\u00e1ta.<\/p>\n\n\n\n

V tomto dokumente opisujeme bezpe\u010dnos\u0165 a ochranu d\u00e1t z poh\u013eadu infra\u0161trukt\u00fary, produktu, prev\u00e1dzky a s\u00faladu s predpismi.<\/p>\n\n\n\n

Bezpe\u010dnostn\u00fd program ALITEO je postaven\u00fd na nasleduj\u00facich princ\u00edpoch:<\/p>\n\n\n\n

    \n
  1. D\u00f4vernos\u0165 \u2013 z\u00e1kazn\u00edcke d\u00e1ta s\u00fa pr\u00edsne oddelen\u00e9 a pr\u00edstupn\u00e9 iba opr\u00e1vnen\u00fdm osob\u00e1m<\/li>\n\n\n\n
  2. Integrita \u2013 presnos\u0165 a konzistencia d\u00e1t je zachovan\u00e1 po\u010das cel\u00e9ho ich \u017eivotn\u00e9ho cyklu<\/li>\n\n\n\n
  3. Dostupnos\u0165 \u2013 platforma je prev\u00e1dzkovan\u00e1 s cie\u013eom maxim\u00e1lnej nepretr\u017eitej dostupnosti<\/li>\n\n\n\n
  4. Fyzick\u00e1 a sie\u0165ov\u00e1 bezpe\u010dnos\u0165 \u2013 ochrana infra\u0161trukt\u00fary pred neopr\u00e1vnen\u00fdm pr\u00edstupom<\/li>\n<\/ol>\n\n\n\n
    <\/div>\n\n\n\n

    Infra\u0161trukt\u00fara<\/h3>\n\n\n\n

    ALITEO prev\u00e1dzkuje svoju infra\u0161trukt\u00faru v\u00fdhradne na platforme Microsoft Azure. Microsoft spravuje fyzick\u00fa bezpe\u010dnos\u0165 a s\u00falad cloudovej infra\u0161trukt\u00fary; ALITEO spravuje bezpe\u010dnos\u0165 softv\u00e9ru a z\u00e1kazn\u00edckych d\u00e1t v tejto infra\u0161trukt\u00fare.<\/p>\n\n\n\n

    Webov\u00e9 servery<\/h4>\n\n\n\n

    Platforma je postaven\u00e1 na .NET 8 a je priebe\u017ene upgradovan\u00e1 na aktu\u00e1lne long-term support verzie. Architekt\u00fara vyu\u017e\u00edva Azure App Services, Azure Functions a Azure CDN na distrib\u00faciu statick\u00e9ho obsahu.<\/p>\n\n\n\n

    Datab\u00e1za<\/h4>\n\n\n\n

    Prim\u00e1rnym \u00falo\u017eiskom d\u00e1t je Azure Database for MySQL \u2013 plne spravovan\u00e1 rela\u010dn\u00e1 datab\u00e1za. Popri nej syst\u00e9m vyu\u017e\u00edva Elasticsearch na fulltextov\u00e9 vyh\u013ead\u00e1vanie a Redis na distribuovan\u00fa cache a session storage.<\/p>\n\n\n\n

    Autentifika\u010dn\u00e9 d\u00e1ta<\/strong><\/p>\n\n\n\n

    Prihlasovacie a rela\u010dn\u00e9 \u00fadaje spravuje Azure Active Directory B2C. Hesl\u00e1 nie s\u00fa ukladan\u00e9 v datab\u00e1ze ALITEO \u2013 autentifik\u00e1ciu plne zabezpe\u010duje Azure B2C. Po prihl\u00e1sen\u00ed z\u00edska aplik\u00e1cia iba tokeny (OpenID Connect); heslo pou\u017e\u00edvate\u013ea ALITEO nikdy nevid\u00ed ani neuklad\u00e1.<\/p>\n\n\n\n

    Firemn\u00e9 d\u00e1ta<\/strong><\/p>\n\n\n\n

    Ukladaj\u00fa sa v\u0161etky d\u00e1ta organiz\u00e1cie: projekty, \u00falohy, harmonogramy, portf\u00f3li\u00e1, reporty a nahran\u00e9 pr\u00edlohy. D\u00e1ta s\u00fa logicky oddelen\u00e9 identifik\u00e1torom firmy (pozri Multi-tenancy ni\u017e\u0161ie).<\/p>\n\n\n\n

    Pou\u017e\u00edvate\u013esk\u00e9 d\u00e1ta<\/strong><\/p>\n\n\n\n

    Ukladaj\u00fa sa profily pou\u017e\u00edvate\u013eov syst\u00e9mu \u2013 meno, e-mailov\u00e1 adresa a preferencie. Pou\u017e\u00edvate\u013esk\u00e9 d\u00e1ta s\u00fa oddelen\u00e9 identifik\u00e1torom pou\u017e\u00edvate\u013ea.<\/p>\n\n\n\n

    \u00dalo\u017eisko s\u00faborov<\/h4>\n\n\n\n

    Pr\u00edlohy a z\u00e1lohy datab\u00e1z s\u00fa ulo\u017een\u00e9 v Azure Blob Storage. Pr\u00edlohy poch\u00e1dzaj\u00face z cloudov\u00fdch platforiem (Microsoft 365, Google Drive) s\u00fa uchov\u00e1van\u00e9 ako odkazy na zdrojov\u00e9 platformy a nie s\u00fa fyzicky kop\u00edrovan\u00e9 do \u00falo\u017eiska ALITEO.<\/p>\n\n\n\n

    Tok d\u00e1t<\/h4>\n\n\n\n

    Z\u00e1kazn\u00edcke d\u00e1ta vstupuj\u00fa do syst\u00e9mu prostredn\u00edctvom HTTPS po\u017eiadaviek z webov\u00e9ho prehliada\u010da alebo mobilnej aplik\u00e1cie. Pre funkcie vy\u017eaduj\u00face komunik\u00e1ciu v re\u00e1lnom \u010dase s\u00fa vyu\u017e\u00edvan\u00e9 WebSocket spojenia \u0161ifrovan\u00e9 protokolom WSS (WebSocket Secure). D\u00e1ta s\u00fa spracov\u00e1van\u00e9 aplika\u010dn\u00fdmi slu\u017ebami na Azure App Service a Azure Functions a ukladan\u00e9 do Azure Database for MySQL. Pr\u00edlohy s\u00fa ukladan\u00e9 v Azure Blob Storage. Fulltextov\u00e9 vyh\u013ead\u00e1vanie zabezpe\u010duje Elasticsearch.<\/p>\n\n\n\n

    Eur\u00f3pska infra\u0161trukt\u00fara<\/h4>\n\n\n\n

    Z\u00e1kazn\u00edcke d\u00e1ta (datab\u00e1za, s\u00fabory, z\u00e1lohy) s\u00fa ukladan\u00e9 v\u00fdhradne v eur\u00f3pskych regi\u00f3noch Azure. AI komponenty vyu\u017e\u00edvaj\u00fa regi\u00f3ny pod\u013ea ni\u017e\u0161ie uvedenej tabu\u013eky:<\/p>\n\n\n\n

    \u00da\u010del<\/th>Regi\u00f3n<\/th><\/tr><\/thead>
    Prim\u00e1rna produkcia<\/td>North Europe (Dublin, \u00cdrsko)<\/td><\/tr>
    Geo-redundantn\u00e1 z\u00e1loha (iba z\u00e1lohy d\u00e1t)<\/td>West Europe (Amsterdam, Holandsko)<\/td><\/tr>
    Embedding modely pre s\u00e9mantick\u00e9 vyh\u013ead\u00e1vanie<\/td>Sweden Central<\/td><\/tr>
    RAG embedding modely a AI Search index<\/td>France Central<\/td><\/tr>
    AI asistent \u2013 jazykov\u00fd model (LLM)<\/td>East US 2<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

    Prim\u00e1rne z\u00e1kazn\u00edcke d\u00e1ta s\u00fa ukladan\u00e9 v\u00fdhradne v prim\u00e1rnom eur\u00f3pskom regi\u00f3ne. Geo-redundancia sa t\u00fdka v\u00fdhradne z\u00e1loh d\u00e1t \u2013 z\u00e1lo\u017en\u00e9 k\u00f3pie s\u00fa uchov\u00e1van\u00e9 v regi\u00f3ne West Europe. Prim\u00e1rna datab\u00e1za nie je geograficky replikovan\u00e1 v re\u00e1lnom \u010dase. Po\u017eiadavky AI asistenta s\u00fa spracov\u00e1van\u00e9 jazykov\u00fdm modelom v regi\u00f3ne East US 2; d\u00e1ta nie s\u00fa v tomto regi\u00f3ne persistentne ukladan\u00e9.<\/p>\n\n\n\n

    Zabezpe\u010denie d\u00e1t<\/h4>\n\n\n\n

    \u0160ifrovanie pri prenose<\/strong><\/p>\n\n\n\n

    V\u0161etka komunik\u00e1cia medzi klientom a serverom prebieha cez HTTPS (TLS 1.2 a vy\u0161\u0161ie) alebo WSS (WebSocket Secure). Ne\u0161ifrovan\u00e9 HTTP spojenia s\u00fa automaticky presmerovan\u00e9 na HTTPS.<\/p>\n\n\n\n

    \u0160ifrovanie v pokoji<\/strong><\/p>\n\n\n\n

    Vrstva<\/th>Mechanizmus<\/th><\/tr><\/thead>
    Azure Database for MySQL<\/td>AES-256, k\u013e\u00fa\u010de spravovan\u00e9 Microsoftom<\/td><\/tr>
    Azure Blob Storage<\/td>AES-256, k\u013e\u00fa\u010de spravovan\u00e9 Microsoftom<\/td><\/tr>
    Citliv\u00e9 z\u00e1znamy v datab\u00e1ze (tokeny, API k\u013e\u00fa\u010de)<\/td>Aplika\u010dn\u00e9 \u0161ifrovanie; \u0161ifrovacie k\u013e\u00fa\u010de v Azure Key Vault<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

    Tokeny a in\u00e9 citliv\u00e9 z\u00e1znamy s\u00fa \u0161ifrovan\u00e9 na aplika\u010dnej \u00farovni e\u0161te pred z\u00e1pisom do datab\u00e1zy. K\u013e\u00fa\u010de s\u00fa spravovan\u00e9 oddelene v Azure Key Vault; v\u0161etok pr\u00edstup ku k\u013e\u00fa\u010dom je riaden\u00fd identitami a auditovan\u00fd.<\/p>\n\n\n\n

    Multi-tenancy<\/h4>\n\n\n\n

    ALITEO je multi-tenant webov\u00e1 aplik\u00e1cia \u2013 infra\u0161trukt\u00fara je zdie\u013ean\u00e1 medzi z\u00e1kazn\u00edckymi in\u0161tanciami. Oddelenie d\u00e1t je zabezpe\u010den\u00e9 na aplika\u010dnej \u00farovni dvoma nez\u00e1visl\u00fdmi k\u013e\u00fa\u010dmi:<\/p>\n\n\n\n

      \n
    1. ID firmy \u2013 odde\u013euje v\u0161etky firemn\u00e9 d\u00e1ta (projekty, \u00falohy, harmonogramy). \u017diadna firma nem\u00e1 pr\u00edstup k d\u00e1tam inej firmy.<\/li>\n\n\n\n
    2. ID pou\u017e\u00edvate\u013ea \u2013 odde\u013euje osobn\u00e9 d\u00e1ta pou\u017e\u00edvate\u013eov.<\/li>\n<\/ol>\n\n\n\n

      Pr\u00edstup k d\u00e1tam in\u00e9ho pou\u017e\u00edvate\u013ea alebo firmy nie je mo\u017en\u00fd. \u00dalohu mo\u017eno priradi\u0165 iba pou\u017e\u00edvate\u013eovi, ktor\u00fd je \u010dlenom danej firmy; eskal\u00e1ciu \u00falohy m\u00f4\u017ee vykona\u0165 iba \u010dlen oboch z\u00fa\u010dastnen\u00fdch firiem. Ka\u017ed\u00fd z\u00e1znam v datab\u00e1ze obsahuje identifik\u00e1tor tenanta, ktor\u00fd je validovan\u00fd na aplika\u010dnej \u00farovni pri ka\u017edej po\u017eiadavke.<\/p>\n\n\n\n

      ALITEO rozli\u0161uje viacero sp\u00f4sobov, ak\u00fdmi m\u00f4\u017ee pou\u017e\u00edvate\u013e z\u00edska\u0165 pr\u00edstup k d\u00e1tam organiz\u00e1cie (tzv. vstupn\u00e9 body). Popri \u0161tandardn\u00fdch prihl\u00e1sen\u00fdch pou\u017e\u00edvate\u013eoch syst\u00e9m podporuje aj anonymn\u00fdch sleduj\u00facich \u2013 pou\u017e\u00edvate\u013eov, ktor\u00ed m\u00f4\u017eu sledova\u0165 vybran\u00e9 objekty bez pln\u00e9ho \u00fa\u010dtu. V\u0161etky tieto vstupn\u00e9 body s\u00fa riaden\u00e9 a auditovan\u00e9; pr\u00edstup k d\u00e1tam organiz\u00e1cie je v\u017edy viazan\u00fd na explicitn\u00e9 opr\u00e1vnenie udelen\u00e9 administr\u00e1torom.<\/p>\n\n\n\n

      \u0160k\u00e1lovate\u013enos\u0165 a spo\u013eahlivos\u0165<\/h4>\n\n\n\n

      ALITEO je postaven\u00e9 na Microsoft Azure, ktor\u00e1 poskytuje horizont\u00e1lnu \u0161k\u00e1lovate\u013enos\u0165 slu\u017eieb. Datab\u00e1za je prev\u00e1dzkovan\u00e1 ako plne spravovan\u00e1 slu\u017eba s automatick\u00fdm failoverom.<\/p>\n\n\n\n

      Z\u00e1lohy<\/strong><\/p>\n\n\n\n

      Z\u00e1lohy datab\u00e1zy s\u00fa vykon\u00e1van\u00e9 v dvoch re\u017eimoch: pln\u00e1 z\u00e1loha (full backup) raz denne a inkrement\u00e1lna z\u00e1loha transak\u010dn\u00fdch logov v kr\u00e1tkych intervaloch. V\u010faka tomu mo\u017eno datab\u00e1zu v pr\u00edpade potreby obnovi\u0165 k \u013eubovo\u013en\u00e9mu bodu v \u010dase. Z\u00e1lohy s\u00fa uchov\u00e1van\u00e9 v geo-redundantnom \u00falo\u017eisku (z\u00e1lo\u017en\u00fd regi\u00f3n West Europe) a maj\u00fa rovnak\u00fa \u00farove\u0148 ochrany ako produk\u010dn\u00e9 d\u00e1ta.<\/p>\n\n\n\n

      <\/div>\n\n\n\n

      Produktov\u00e9 bezpe\u010dnostn\u00e9 funkcie<\/h3>\n\n\n\n

      Zabezpe\u010denie prihl\u00e1senia<\/h4>\n\n\n\n

      Azure B2C a hesl\u00e1<\/strong><\/p>\n\n\n\n

      Prihlasovanie je realizovan\u00e9 v\u00fdhradne cez Azure Active Directory B2C. Heslo pou\u017e\u00edvate\u013ea je zad\u00e1van\u00e9 iba na str\u00e1nkach hostovan\u00fdch Microsoftom \u2013 ALITEO heslo nikdy nevid\u00ed ani neuklad\u00e1. Plat\u00ed to aj pre mobiln\u00e9 zariadenia, kde prihl\u00e1senie prebieha v syst\u00e9movom prehliada\u010di, nie vo vn\u00fatri aplik\u00e1cie.<\/p>\n\n\n\n

      V\u0161etky citliv\u00e9 prihlasovacie \u00fadaje a API k\u013e\u00fa\u010de s\u00fa ulo\u017een\u00e9 v Azure Key Vault. Aplik\u00e1cie pristupuj\u00fa ku Key Vaultu prostredn\u00edctvom spravovan\u00fdch ident\u00edt.<\/p>\n\n\n\n

      Single Sign-On<\/strong><\/p>\n\n\n\n

      ALITEO podporuje prihl\u00e1senie cez Google \u00fa\u010det. Vo verzii 26.1 (pl\u00e1novan\u00e9 vydanie do konca leta 2026) bude dostupn\u00e1 podpora podnikov\u00e9ho Single Sign-On v dvoch variantoch:<\/p>\n\n\n\n

        \n
      1. JIT (Just-in-<\/strong>Time<\/strong> <\/strong>provisioning<\/strong>)<\/strong> \u2013 pou\u017e\u00edvate\u013esk\u00fd \u00fa\u010det sa vytvor\u00ed automaticky pri prvom prihl\u00e1sen\u00ed cez firemn\u00fa identitu. Nie je potrebn\u00e9 pou\u017e\u00edvate\u013ea vopred zaklada\u0165.<\/li>\n\n\n\n
      2. SCIM<\/strong> <\/strong>\u2013 priebe\u017en\u00e1 automatick\u00e1 synchroniz\u00e1cia pou\u017e\u00edvate\u013eov a skup\u00edn z firemn\u00e9ho adres\u00e1ra (napr. Microsoft Entra ID), vr\u00e1tane ich vytv\u00e1rania, aktualiz\u00e1cie a deaktiv\u00e1cie.<\/li>\n<\/ol>\n\n\n\n

        Z\u00e1kazn\u00edci so z\u00e1ujmom o pred\u010dasn\u00fd pr\u00edstup n\u00e1s m\u00f4\u017eu kontaktova\u0165 na .<\/p>\n\n\n\n

        Spr\u00e1va pou\u017e\u00edvate\u013eov a pr\u00edstupov\u00e9 pr\u00e1va<\/h4>\n\n\n\n

        Prid\u00e1vanie pou\u017e\u00edvate\u013eov do organiz\u00e1cie \u2013 intern\u00fdch aj extern\u00fdch \u2013 je vyhraden\u00e9 v\u00fdhradne administr\u00e1torovi organiz\u00e1cie. \u017diadna in\u00e1 rola nem\u00e1 opr\u00e1vnenie prid\u00e1va\u0165 \u010dlenov. Administr\u00e1tor m\u00f4\u017ee kedyko\u013evek pr\u00edstup \u013eubovo\u013en\u00e9ho pou\u017e\u00edvate\u013ea deaktivova\u0165.<\/p>\n\n\n\n

        Spr\u00e1vcovia (admins) organiz\u00e1cie v ALITEO m\u00f4\u017eu:<\/p>\n\n\n\n

          \n
        1. Spravova\u0165 pou\u017e\u00edvate\u013eov \u2013 prid\u00e1va\u0165 a odobera\u0165 \u010dlenov organiz\u00e1cie<\/li>\n\n\n\n
        2. Riadi\u0165 opr\u00e1vnenia \u2013 nastavova\u0165 pr\u00edstupov\u00e9 pr\u00e1va na \u00farovni projektov, t\u00edmov a \u010fal\u0161\u00edch objektov<\/li>\n\n\n\n
        3. Exportova\u0165 alebo po\u017eiada\u0165 o vymazanie firemn\u00fdch d\u00e1t<\/li>\n<\/ol>\n\n\n\n

          Pr\u00edstupov\u00e9 pr\u00e1va s\u00fa v ALITEO definovan\u00e9 kombin\u00e1ciou rol\u00ed a opr\u00e1vnen\u00ed priraden\u00fdch ku konkr\u00e9tnym objektom (projektom, t\u00edmom, portf\u00f3li\u00e1m, zlo\u017ek\u00e1m dokumentov a \u010fal\u0161\u00edm). Ka\u017ed\u00fd pou\u017e\u00edvate\u013e je ozna\u010den\u00fd ako intern\u00fd alebo extern\u00fd; extern\u00ed \u010dlenovia maj\u00fa v\u017edy obmedzen\u00e9 opr\u00e1vnenia oproti intern\u00fdm. Detailn\u00fd opis rol\u00ed, typov \u010dlenstva a ich opr\u00e1vnen\u00ed je s\u00fa\u010das\u0165ou produktovej dokument\u00e1cie ALITEO.<\/p>\n\n\n\n

          Spr\u00e1va d\u00e1t<\/h4>\n\n\n\n

          Pou\u017e\u00edvatelia m\u00f4\u017eu v r\u00e1mci aplik\u00e1cie exportova\u0165 vybran\u00e9 vlastn\u00e9 d\u00e1ta; dostupnos\u0165 funkcie z\u00e1vis\u00ed od roly pou\u017e\u00edvate\u013ea a konfigur\u00e1cie danej komponenty. Vymazanie d\u00e1t mo\u017eno vykona\u0165 na \u017eiados\u0165 prostredn\u00edctvom podpory ALITEO.<\/p>\n\n\n\n

          <\/div>\n\n\n\n

          Zabezpe\u010denie aplik\u00e1cie<\/h3>\n\n\n\n

          ALITEO je webov\u00e1 SaaS aplik\u00e1cia. Pou\u017e\u00edvatelia pristupuj\u00fa k d\u00e1tam cez webov\u00fd prehliada\u010d alebo mobiln\u00fa aplik\u00e1ciu.<\/p>\n\n\n\n

          Platforma je postaven\u00e1 na .NET 8 a je priebe\u017ene aktualizovan\u00e1 na aktu\u00e1lne LTS verzie. V\u00fdvoj prebieha s d\u00f4razom na bezpe\u010dnostn\u00e9 princ\u00edpy. Pravidelne vykon\u00e1vame intern\u00e9 bezpe\u010dnostn\u00e9 rev\u00edzie zameran\u00e9 okrem in\u00e9ho na:<\/p>\n\n\n\n

            \n
          1. Injekcie (SQL, pr\u00edkazov\u00fd riadok)<\/li>\n\n\n\n
          2. Neopr\u00e1vnen\u00fd pr\u00edstup k d\u00e1tam (Broken Access Control)<\/li>\n\n\n\n
          3. Vystavenie citliv\u00fdch d\u00e1t<\/li>\n\n\n\n
          4. Cross-Site Scripting (XSS)<\/li>\n\n\n\n
          5. Cross-Site Request Forgery (CSRF)<\/li>\n\n\n\n
          6. Pou\u017e\u00edvanie komponentov so zn\u00e1mymi zranite\u013enos\u0165ami<\/li>\n\n\n\n
          7. Nedostato\u010dn\u00e9 logovanie a monitoring<\/li>\n<\/ol>\n\n\n\n

            Zmeny v k\u00f3de prech\u00e1dzaj\u00fa automatizovan\u00fdmi testami a manu\u00e1lnym code review. Pred nasaden\u00edm do produkcie s\u00fa zmeny overovan\u00e9 v testovacom prostred\u00ed.<\/p>\n\n\n\n

            <\/div>\n\n\n\n

            Platforma ALITEO<\/h3>\n\n\n\n

            Integr\u00e1cie a API<\/h4>\n\n\n\n

            ALITEO poskytuje REST API, ktor\u00e9 umo\u017e\u0148uje program\u00e1torsk\u00fd pr\u00edstup k d\u00e1tam platformy. Autentifik\u00e1cia API po\u017eiadaviek prebieha prostredn\u00edctvom API k\u013e\u00fa\u010da vydan\u00e9ho na \u00farovni organiz\u00e1cie.<\/p>\n\n\n\n

            Aplik\u00e1cie tret\u00edch str\u00e1n<\/h4>\n\n\n\n

            ALITEO sa integruje s nasleduj\u00facimi extern\u00fdmi platformami:<\/p>\n\n\n\n

            Platforma<\/th>\u00da\u010del<\/th><\/tr><\/thead>
            Microsoft Graph API<\/td>Integr\u00e1cia s kalend\u00e1rom a kontaktmi (Microsoft 365)<\/td><\/tr>
            Google Calendar API<\/td>Integr\u00e1cia s Google kalend\u00e1rom a kontaktmi<\/td><\/tr>
            Azure AI Services<\/td>AI asistent \u2013 jazykov\u00fd model a RAG embedding modely<\/td><\/tr>
            Azure OpenAI<\/td>Embedding modely pre s\u00e9mantick\u00e9 vyh\u013ead\u00e1vanie<\/td><\/tr>
            Azure AI Search<\/td>Vyh\u013ead\u00e1vac\u00ed index AI asistenta (RAG architekt\u00fara)<\/td><\/tr>
            SendGrid<\/td>Odosielanie e-mailov\u00fdch notifik\u00e1ci\u00ed<\/td><\/tr>
            GoPay<\/td>Platobn\u00e1 br\u00e1na<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

            AI asistent<\/strong><\/p>\n\n\n\n

            AI funkcionalita je prev\u00e1dzkovan\u00e1 ako samostatn\u00e1, izolovan\u00e1 slu\u017eba oddelen\u00e1 od hlavnej aplik\u00e1cie. T\u00e1to architekt\u00fara zabezpe\u010duje, \u017ee AI komponent pristupuje iba k d\u00e1tam nevyhnutn\u00fdm pre dan\u00fa funkciu a nem\u00e1 pr\u00edstup k ostatn\u00fdm \u010dastiam syst\u00e9mu.<\/p>\n\n\n\n

            Po\u017eiadavky s\u00fa spracov\u00e1van\u00e9 prostredn\u00edctvom Azure AI Services a Azure OpenAI modelov v r\u00e1mci infra\u0161trukt\u00fary Microsoft. Na spracovanie d\u00e1t sa vz\u0165ahuj\u00fa podmienky Microsoftu pre ochranu d\u00e1t; z\u00e1kazn\u00edcke d\u00e1ta nie s\u00fa zdie\u013ean\u00e9 s extern\u00fdmi poskytovate\u013emi AI mimo tejto dohody. Z\u00e1kazn\u00edcke d\u00e1ta spracov\u00e1van\u00e9 modelmi nie s\u00fa vyu\u017e\u00edvan\u00e9 na tr\u00e9novanie z\u00e1kladn\u00fdch AI modelov ().<\/p>\n\n\n\n

            D\u00e1ta spracov\u00e1van\u00e9 prostredn\u00edctvom \u010fal\u0161\u00edch aplik\u00e1ci\u00ed tret\u00edch str\u00e1n prebiehaj\u00fa iba v rozsahu nevyhnutnom na poskytnutie danej funkcie.<\/p>\n\n\n\n

            <\/div>\n\n\n\n

            Opera\u010dn\u00e1 bezpe\u010dnos\u0165<\/h3>\n\n\n\n

            Informa\u010dn\u00e1 bezpe\u010dnos\u0165 ALITEO<\/h4>\n\n\n\n

            Za bezpe\u010dnos\u0165 inform\u00e1ci\u00ed zodpoved\u00e1 ur\u010den\u00fd z\u00e1stupca vedenia spolo\u010dnosti. Bezpe\u010dnostn\u00e9 politiky s\u00fa pravidelne presk\u00famavan\u00e9 v r\u00e1mci syst\u00e9mu riadenia bezpe\u010dnosti inform\u00e1ci\u00ed (ISMS) certifikovan\u00e9ho pod\u013ea ISO\/IEC 27001. Bezpe\u010dnostn\u00e9 incidenty a z\u00e1va\u017en\u00e9 zranite\u013enosti s\u00fa eskalovan\u00e9 na \u00farove\u0148 vedenia.<\/p>\n\n\n\n

            D\u00f4vern\u00e9 inform\u00e1cie<\/h4>\n\n\n\n

            ALITEO pova\u017euje v\u0161etky z\u00e1kazn\u00edcke d\u00e1ta za d\u00f4vern\u00e9 bez oh\u013eadu na ich klasifik\u00e1ciu. Pr\u00edstup k d\u00f4vern\u00fdm inform\u00e1ci\u00e1m je obmedzen\u00fd v\u00fdhradne na zamestnancov, ktor\u00ed ho potrebuj\u00fa na v\u00fdkon svojej pr\u00e1ce, a iba v nevyhnutnom rozsahu.<\/p>\n\n\n\n

            \u013dudsk\u00e9 zdroje<\/h4>\n\n\n\n

            V\u0161etci zamestnanci a dod\u00e1vatelia ALITEO s\u00fa zmluvne viazan\u00ed povinnos\u0165ou ml\u010danlivosti. Pr\u00edstup k produk\u010dn\u00fdm syst\u00e9mom a z\u00e1kazn\u00edckym d\u00e1tam sa riadi princ\u00edpom najni\u017e\u0161\u00edch nevyhnutn\u00fdch opr\u00e1vnen\u00ed (least privilege). Pr\u00edstup je riaden\u00fd prostredn\u00edctvom Azure Managed Identities \u2013 v\u00fdvoj\u00e1ri sa dost\u00e1vaj\u00fa k produk\u010dn\u00fdm d\u00e1tam iba v definovan\u00fdch a od\u00f4vodnen\u00fdch pr\u00edpadoch.<\/p>\n\n\n\n

            Fyzick\u00e1 bezpe\u010dnos\u0165<\/h4>\n\n\n\n

            Fyzick\u00e1 bezpe\u010dnos\u0165 d\u00e1tov\u00fdch centier je zabezpe\u010dovan\u00e1 Microsoftom v r\u00e1mci platformy Azure. Microsoft udr\u017eiava svetov\u00e9 \u0161tandardy fyzickej ochrany svojich d\u00e1tov\u00fdch centier.<\/p>\n\n\n\n

            Sie\u0165ov\u00e1 bezpe\u010dnos\u0165<\/h4>\n\n\n\n

            Komunik\u00e1cia medzi jednotliv\u00fdmi komponentmi syst\u00e9mu je obmedzen\u00e1 iba na o\u010dak\u00e1van\u00e9 a definovan\u00e9 toky prostredn\u00edctvom konfigur\u00e1cie Azure infra\u0161trukt\u00fary.<\/p>\n\n\n\n

            Riadenie riz\u00edk a zranite\u013enost\u00ed<\/h4>\n\n\n\n

            ALITEO vykon\u00e1va intern\u00e9 bezpe\u010dnostn\u00e9 rev\u00edzie zameran\u00e9 na identifik\u00e1ciu zranite\u013enost\u00ed v aplik\u00e1cii aj infra\u0161trukt\u00fare. Bezpe\u010dnostn\u00e9 nedostatky s\u00fa hodnoten\u00e9 pod\u013ea z\u00e1va\u017enosti a odstra\u0148ovan\u00e9 v zodpovedaj\u00facom \u010dasovom r\u00e1mci.<\/p>\n\n\n\n

            Reakcia na incidenty<\/h4>\n\n\n\n

            ALITEO m\u00e1 definovan\u00e9 postupy pre reakciu na bezpe\u010dnostn\u00e9 incidenty. V pr\u00edpade poru\u0161enia bezpe\u010dnosti s\u00fa dotknut\u00ed z\u00e1kazn\u00edci informovan\u00ed bez zbyto\u010dn\u00e9ho odkladu od zistenia incidentu, v s\u00falade s po\u017eiadavkami GDPR.<\/p>\n\n\n\n

            Obnova po hav\u00e1rii a business continuity<\/h4>\n\n\n\n

            ALITEO vyu\u017e\u00edva geografick\u00fa redundanciu Azure na zabezpe\u010denie obnovy po hav\u00e1rii:<\/p>\n\n\n\n

              \n
            1. Azure Blob Storage je prev\u00e1dzkovan\u00e9 v re\u017eime RA-GRS (Read-Access Geo-Redundant Storage) \u2013 d\u00e1ta s\u00fa automaticky replikovan\u00e9 do z\u00e1lo\u017en\u00e9ho regi\u00f3nu.<\/li>\n\n\n\n
            2. Z\u00e1lohy datab\u00e1zy s\u00fa uchov\u00e1van\u00e9 v geo-redundantnom \u00falo\u017eisku z\u00e1lo\u017en\u00e9ho regi\u00f3nu.<\/li>\n\n\n\n
            3. V pr\u00edpade v\u00fdpadku prim\u00e1rneho regi\u00f3nu s\u00fa k dispoz\u00edcii z\u00e1lo\u017en\u00e9 k\u00f3pie d\u00e1t v sekund\u00e1rnom regi\u00f3ne.<\/li>\n<\/ol>\n\n\n\n

              Uchov\u00e1vanie a likvid\u00e1cia d\u00e1t<\/h4>\n\n\n\n

              Uchov\u00e1vanie d\u00e1t<\/strong><\/p>\n\n\n\n

              Z\u00e1kazn\u00edcke d\u00e1ta s\u00fa uchov\u00e1van\u00e9 po\u010das trvania zmluvn\u00e9ho vz\u0165ahu a \u010falej pod\u013ea podmienok uveden\u00fdch vo VOP.<\/p>\n\n\n\n

              Likvid\u00e1cia d\u00e1t<\/strong><\/p>\n\n\n\n

              Na \u017eiados\u0165 z\u00e1kazn\u00edka alebo jeho opr\u00e1vnen\u00e9ho z\u00e1stupcu ALITEO vykon\u00e1 vymazanie z\u00e1kazn\u00edckych d\u00e1t.<\/p>\n\n\n\n

              Monitoring<\/h4>\n\n\n\n

              ALITEO monitoruje prev\u00e1dzku a dostupnos\u0165 syst\u00e9mu prostredn\u00edctvom nieko\u013ek\u00fdch n\u00e1strojov:<\/p>\n\n\n\n

                \n
              1. Vlastn\u00fd error log \u2013 zbierame a analyzujeme aplika\u010dn\u00e9 chyby<\/li>\n\n\n\n
              2. Auditn\u00e9 z\u00e1znamy (Aktivity) \u2013 v r\u00e1mci aplik\u00e1cie s\u00fa dostupn\u00e9 z\u00e1znamy o k\u013e\u00fa\u010dov\u00fdch oper\u00e1ci\u00e1ch vykonan\u00fdch pou\u017e\u00edvate\u013emi<\/li>\n\n\n\n
              3. Health checks \u2013 automatizovan\u00e9 kontroly dostupnosti k\u013e\u00fa\u010dov\u00fdch komponentov s notifik\u00e1ciou v\u00fdvoj\u00e1rov formou SMS a e-mailu<\/li>\n\n\n\n
              4. Azure Application Insights \u2013 doplnkov\u00e9 monitorovanie v\u00fdkonu a dostupnosti<\/li>\n<\/ol>\n\n\n\n

                Aplika\u010dn\u00e9 logy s\u00fa uchov\u00e1van\u00e9 po dobu 30 \u2013 90 dn\u00ed.<\/p>\n\n\n\n

                Sub-procesori a spr\u00e1va dod\u00e1vate\u013eov<\/h4>\n\n\n\n

                ALITEO starostlivo vyber\u00e1 tretie strany, ktor\u00e9 sp\u013a\u0148aj\u00fa po\u017eiadavky na ochranu a bezpe\u010dnos\u0165 d\u00e1t konzistentn\u00e9 s na\u0161imi vlastn\u00fdmi \u0161tandardmi. Zmluvn\u00e9 vz\u0165ahy s dod\u00e1vate\u013emi zah\u0155\u0148aj\u00fa z\u00e1v\u00e4zky k ochrane z\u00e1kazn\u00edckych d\u00e1t.<\/p>\n\n\n\n

                <\/div>\n\n\n\n

                S\u00fakromie, certifik\u00e1cia a s\u00falad s predpismi<\/h3>\n\n\n\n

                Z\u00e1sady ochrany osobn\u00fdch \u00fadajov a VOP<\/h4>\n\n\n\n

                Podmienky spracovania osobn\u00fdch \u00fadajov, zmluvn\u00e9 podmienky a SLA s\u00fa k dispoz\u00edcii na .<\/p>\n\n\n\n

                Certifik\u00e1cia a pr\u00e1vny s\u00falad<\/h4>\n\n\n\n

                ISO\/IEC 27001<\/strong><\/p>\n\n\n\n

                Prev\u00e1dzkovate\u013e platformy ALITEO, spolo\u010dnos\u0165 KARAT Software a.s., je certifikovan\u00e1 pod\u013ea normy ISO\/IEC 27001 pre syst\u00e9m riadenia bezpe\u010dnosti inform\u00e1ci\u00ed (ISMS). Certifik\u00e1cia potvrdzuje, \u017ee procesy a kontroly v oblasti bezpe\u010dnosti inform\u00e1ci\u00ed boli overen\u00e9 nez\u00e1vislou tre\u0165ou stranou.<\/p>\n\n\n\n

                GDPR<\/h4>\n\n\n\n

                ALITEO vystupuje ako sprostredkovate\u013e osobn\u00fdch \u00fadajov v zmysle nariadenia GDPR (V\u0161eobecn\u00e9 nariadenie o ochrane osobn\u00fdch \u00fadajov). Sprac\u00favan\u00e9 osobn\u00e9 \u00fadaje zah\u0155\u0148aj\u00fa meno, priezvisko a e-mailov\u00fa adresu pou\u017e\u00edvate\u013eov syst\u00e9mu.<\/p>\n\n\n\n

                Kroky, ktor\u00e9 ALITEO podniklo k s\u00faladu s GDPR:<\/p>\n\n\n\n

                  \n
                1. Rev\u00edzia zml\u00fav so z\u00e1kazn\u00edkmi, partnermi a dod\u00e1vate\u013emi<\/li>\n\n\n\n
                2. Posilnenie bezpe\u010dnostn\u00fdch postupov a internej dokument\u00e1cie<\/li>\n\n\n\n
                3. Mapovanie sprac\u00favan\u00fdch d\u00e1t<\/li>\n\n\n\n
                4. Zavedenie procesu pre uplat\u0148ovanie pr\u00e1v dotknut\u00fdch os\u00f4b<\/li>\n\n\n\n
                5. \u0160kolenie zamestnancov v oblasti ochrany osobn\u00fdch \u00fadajov<\/li>\n<\/ol>\n\n\n\n

                  DPA (Zmluva o spracovan\u00ed d\u00e1t)<\/strong><\/p>\n\n\n\n

                  V s\u00falade s GDPR uzatv\u00e1ra ALITEO so z\u00e1kazn\u00edkmi sprostredkovate\u013esk\u00fa zmluvu (DPA) automaticky ako s\u00fa\u010das\u0165 prijatia zmluvn\u00fdch podmienok. ALITEO sa zav\u00e4zuje sprac\u00fava\u0165 osobn\u00e9 \u00fadaje v\u00fdhradne pod\u013ea pokynov prev\u00e1dzkovate\u013ea a v s\u00falade s po\u017eiadavkami GDPR. Bezpe\u010dnostn\u00e9 incidenty s\u00fa hl\u00e1sen\u00e9 bez zbyto\u010dn\u00e9ho odkladu od ich zistenia.<\/p>\n\n\n\n

                  <\/div>\n\n\n\n
                  <\/div>\n","protected":false},"excerpt":{"rendered":"

                  Bezpe\u010dnos\u0165 a s\u00fakromie Bezpe\u010dnos\u0165 je pre ALITEO neoddelite\u013enou s\u00fa\u010das\u0165ou v\u00fdvoja, nie dodato\u010dnou vrstvou. Tento dokument je ur\u010den\u00fd pre z\u00e1kazn\u00edkov, partnerov a bezpe\u010dnostn\u00e9 t\u00edmy, ktor\u00e9 potrebuj\u00fa […]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"acf":[],"yoast_head":"\nBezpe\u010dnos\u0165 a s\u00fakromie - ALITEO<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/aliteo.com\/sk\/bezpecnost-a-sukromie\/\" \/>\n<meta property=\"og:locale\" content=\"sk_SK\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Bezpe\u010dnos\u0165 a s\u00fakromie - ALITEO\" \/>\n<meta property=\"og:description\" content=\"Bezpe\u010dnos\u0165 a s\u00fakromie Bezpe\u010dnos\u0165 je pre ALITEO neoddelite\u013enou s\u00fa\u010das\u0165ou v\u00fdvoja, nie dodato\u010dnou vrstvou. Tento dokument je ur\u010den\u00fd pre z\u00e1kazn\u00edkov, partnerov a bezpe\u010dnostn\u00e9 t\u00edmy, ktor\u00e9 potrebuj\u00fa […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/aliteo.com\/sk\/bezpecnost-a-sukromie\/\" \/>\n<meta property=\"og:site_name\" content=\"ALITEO\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-27T10:25:10+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Predpokladan\u00fd \u010das \u010d\u00edtania\" \/>\n\t<meta name=\"twitter:data1\" content=\"11 min\u00fat\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/aliteo.com\/sk\/bezpecnost-a-sukromie\/\",\"url\":\"https:\/\/aliteo.com\/sk\/bezpecnost-a-sukromie\/\",\"name\":\"Bezpe\u010dnos\u0165 a s\u00fakromie - ALITEO\",\"isPartOf\":{\"@id\":\"https:\/\/aliteo.com\/#website\"},\"datePublished\":\"2026-05-25T13:07:42+00:00\",\"dateModified\":\"2026-05-27T10:25:10+00:00\",\"inLanguage\":\"sk-SK\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/aliteo.com\/sk\/bezpecnost-a-sukromie\/\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/aliteo.com\/#website\",\"url\":\"https:\/\/aliteo.com\/\",\"name\":\"ALITEO.com\",\"description\":\"Just another WordPress site\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/aliteo.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"sk-SK\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Bezpe\u010dnos\u0165 a s\u00fakromie - ALITEO","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/aliteo.com\/sk\/bezpecnost-a-sukromie\/","og_locale":"sk_SK","og_type":"article","og_title":"Bezpe\u010dnos\u0165 a s\u00fakromie - ALITEO","og_description":"Bezpe\u010dnos\u0165 a s\u00fakromie Bezpe\u010dnos\u0165 je pre ALITEO neoddelite\u013enou s\u00fa\u010das\u0165ou v\u00fdvoja, nie dodato\u010dnou vrstvou. Tento dokument je ur\u010den\u00fd pre z\u00e1kazn\u00edkov, partnerov a bezpe\u010dnostn\u00e9 t\u00edmy, ktor\u00e9 potrebuj\u00fa […]","og_url":"https:\/\/aliteo.com\/sk\/bezpecnost-a-sukromie\/","og_site_name":"ALITEO","article_modified_time":"2026-05-27T10:25:10+00:00","twitter_card":"summary_large_image","twitter_misc":{"Predpokladan\u00fd \u010das \u010d\u00edtania":"11 min\u00fat"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/aliteo.com\/sk\/bezpecnost-a-sukromie\/","url":"https:\/\/aliteo.com\/sk\/bezpecnost-a-sukromie\/","name":"Bezpe\u010dnos\u0165 a s\u00fakromie - ALITEO","isPartOf":{"@id":"https:\/\/aliteo.com\/#website"},"datePublished":"2026-05-25T13:07:42+00:00","dateModified":"2026-05-27T10:25:10+00:00","inLanguage":"sk-SK","potentialAction":[{"@type":"ReadAction","target":["https:\/\/aliteo.com\/sk\/bezpecnost-a-sukromie\/"]}]},{"@type":"WebSite","@id":"https:\/\/aliteo.com\/#website","url":"https:\/\/aliteo.com\/","name":"ALITEO.com","description":"Just another WordPress site","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/aliteo.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"sk-SK"}]}},"_links":{"self":[{"href":"https:\/\/aliteo.com\/sk\/wp-json\/wp\/v2\/pages\/5368"}],"collection":[{"href":"https:\/\/aliteo.com\/sk\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/aliteo.com\/sk\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/aliteo.com\/sk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/aliteo.com\/sk\/wp-json\/wp\/v2\/comments?post=5368"}],"version-history":[{"count":2,"href":"https:\/\/aliteo.com\/sk\/wp-json\/wp\/v2\/pages\/5368\/revisions"}],"predecessor-version":[{"id":5371,"href":"https:\/\/aliteo.com\/sk\/wp-json\/wp\/v2\/pages\/5368\/revisions\/5371"}],"wp:attachment":[{"href":"https:\/\/aliteo.com\/sk\/wp-json\/wp\/v2\/media?parent=5368"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}