Compliance

Data Retention & Compliance:

The OffsiteDataSync data retention service is the only solution on the market certified to the United States and Canadian Government’s Federal Information Processing Standards. Our data retention solutions are compliant with stringent medical, legal, financial and governmental regulations, meeting and / or exceeding regulatory specifications for the following:

• Alcohol, Tobacco, Firearms & Explosives
• Department of Defense
• Federal Deposit Insurance Corporation
• Gramm Leach Bliley Act
• Health Information Privacy and Portability Act
• Sarbanes Oxley Act
• SAS 70 and SAS 70 Type II

Our solution is the ONLY data retention service on the market that is compliant with the Federal Information Processing Standards (FIPS). The FIPS publications are guidelines that set best practices for cryptographic modules of software and hardware computer security products. For more details, please visit our data retention and disaster recovery service pages.

Partnering with OffsiteDataSync:

Guarantees Secure Transmission:
OffsiteDataSync implements AES 256-bit encryption key technology. All data is encrypted and transmitted securely to a vault residing at a Tier-3 data center.

Prevents Unauthorized Access:
We prevent unauthorized individuals within a customer’s organization from accessing backup information as well as hackers and outside individuals and entities. OffsiteDataSync employees and associates cannot access, interpret or in any way view encrypted customer data. All records are stored with strictly protected access keys that only the customer has access to. In the absence of these encryption keys stored data is completely inaccessible.

Prevents Physical Access:
Access to vaults and data center locations is strictly controlled through administrative procedures, physical safeguards, and technical security measures to prevent unauthorized use, access or viewing of data. Access is to our facility, and it is gained through a combination of key-card swipe, biometric hand-scan with pulse detection technology as well as lock-and-key/secure key & RSA ID access to systems. Our facility is monitored by on-site personnel, and equipped with over 50 IP cameras.

Prevents Logical Access:
Logical access to any and all data is strictly controlled through: state-of-the art firewalls that are monitored in real-time, a secure user interface, random electronic anomaly detection sweeps, password authentication, transaction log collection, and complete audit trail. We use a proprietary layered-security technique with a time tested and hardened best-practices approach.