What do we do to keep your time-tracking data secure?
In a way, it’s a leap of faith to hand responsibility for your data to a third party. We recognized that when we began encouraging customers to use our Software-as-a-Service (SaaS) timesheets. We had to meet the most stringent requirements of some of the world’s largest companies. They wanted documented assurance that their time tracking information would be secure, available, and fully backed up. To satisfy them, we took pains to create a world-class infrastructure for data security.
When you become a Replicon customer we take full responsibility for protecting your data, and ensuring there’s a high degree of “uptime” access to it. How do we do that? There are several interconnected components.
Physical Security
We start with our data centers. Access to them is limited to authorized personnel, and is controlled by key card or biometric scanning. There’s digital surveillance to monitor and record activities, a 24/7 onsite security staff, and alarms connected to local police.
The data centers feature environmental controls to ensure that servers always operate within specifications. There are multiple heating, ventilation and air-conditioning (HVAC) units to regulate temperature and humidity, and the servers themselves are maintained in racks raised above the floor to minimize impact of localized flooding. Redundant power supplies use a combination of uninterrupted power supply (UPS), generators, or battery backup.
Certification
We undergo an annual SAS 70 Type II audit, which is the industry standard—established by the American Institute of Certified Public Accountants—for demonstrating that service organizations have adequate controls and processes in place to satisfy their stated objectives for securing data.
Application Security
All of the data sent between your computers and our host servers is encrypted via Secure Sockets Layer (SSL) technology, and there are industry-standard security provisions within our applications, including configurable password controls, session timeouts, role-based user access, and separate database schema for individual customers.
Network Protection
Intrusion detection and prevention services are deployed at multiple levels of our network, and there are firewalls that separate it from outside traffic.
Service Level Guarantee
All of the above combine to ensure that our uptime exceeds 99.5% per month. In a typical month, it is 100%.
Disaster Recovery
Your data is completely backed up offsite. That includes 100% redundant architecture for all networking and application components such as switches, load balancers, firewalls, routers, web servers, application servers, and database servers. There are backup and recovery procedures that feature database backups every four hours and full backups weekly, plus disaster recovery tests that are performed regularly to ensure recoverability.
The result?
You can relax, knowing your data is secure and available. As with everything else, we strive to make your experience hassle-free—and worry-free as well.
