October 11, 2011
For Sfile, it quite simply means that we ensure rock-solid reliability, security and performance for all of our users to access, review and share their data at anytime from anywhere.
SAS 70 TYPE II CERTIFIED
This certification ensures that all of Sfile controls, processes and policies that protect the data in our systems have successfully completed a SAS 70 Type II audit. In other words, all of our data residing at CyrusOne is secure under the SAS70 auditing industry standard.
This qualification allows Sfile to handle enterprise-class recoveries, and support users who must maintain compliance with data privacy and data security regulations such as:
- NIST (National Institute of Standards & Technology) SP 800.34 (Rev.1)
- HIPAA (Health Insurance Portability and Accountability Act)
- FERPA (Family Educational Rights and Privacy Act
- SOX (Sarbanes-Oxley Act of 2002)
- GLBA (Gramm-Leach-Bliley Act of 1999)
SAS 70 Type II certification effectively examines Sfile’s internal control framework and guarantees the following:
How is Type II different from Type 1?
A Type I report is only issued for a particular date. For example, a certified public accounting firm would examine a company’s controls and report on the "controls placed in operation" for a specified point in time, such as June 1, 2008.
Testing of controls is required for Type II audits, with a minimum testing period of at least six months. Testing is conducted throughout various predetermined timeframes throughout the six-month period, and in a manner that significantly mitigates any type of business interruption.
Being both Safe Harbor compliant and SAS 70 Type II certified, Sfile proves its commitment to protect all confidential information and to ensure that controls in hosting and IT infrastructure services, which include security practices, physical and logical facility access, environmental controls, data backups, customer service practices, and management policies, are effectively operating at all times.
If there are any questions, please contact email@example.com.