Backup Vendors and their Protection & Privacy Policies
Ensite Business Technology Ltd, offer backup and recovery services for our clients.
In order to facilitate these services, we use two of the largest backup platforms available, who invest the very best technolgies and practices to ensure they remain secure and compliant. Here is information relevant to the security and privacy policies they have in place.
- Your information is your information, not our information.
- We never sell your information to anyone, nor do we sell information about you and we are commited to being GDPR Compliant
- We never sift through your information in order to create a profile of you or target advertising.
- You can always get your information back. We have no rights to your information if you leave the service.
Data transfer security
All user data is encrypted locally with military-grade encryption prior to transfer via a 256-bit SSL connection. Users can choose a managed encryption key or a personal key for added security. The encrypted data is uploaded to the Mozy backup service over a mutually authenticated SSL connection to further preserve confidentiality. All users are authenticated using username and password credentials.
Data center security
Mozy servers are located in several world-class data centers across the globe. All data centers are either SAS 70 or ISO 27001 certified and, where applicable, adhere to European Union Safe Harbor Privacy Principles.
On-site monitoring and security
All data centers are surrounded by a secure perimeter and staffed 24/7/365 with technology professionals who maintain the highest standards in data protection. Both card and biometric security authentication are required to enter the facilities and access the Mozy server area.
Fire detection and suppression system
EMC-managed data centers utilize a gas fire suppression system to extinguish fires in the event of an emergency without jeopardizing server functionality, which include state-of-the-art fire detection and suppression systems, and seismic safeguards that can withstand a 7.5 magnitude earthquake.
Redundant power, networks, and hardware
Power is conditioned and protected by redundant systems and guaranteed by generators supplied by diesel fuel storage. In addition, multiple network providers service each data center to ensure operation in the event a network carrier fails. We also have a proprietary protection mechanism based on a complex encoding structure to ensure that your data is safe, even in the event of multiple hardware failures.
All sites have cooling mechanisms in place to ensure the servers are kept at optimal operating temperatures.
Your data is encrypted with 256-bit AES encryption on transfer and storage. On sign up, provide your private encryption key (known only to you and not stored anywhere on our servers) or opt for the default encryption key. We recommend that you choose your own private encryption key to maintain utmost data confidentiality.
All browser-based data transfer operations including sharing of files and folders use 128-bit SSL encryption.
Data security is our topmost priority. At IBackup, we are committed to protect your valuable data with our stringent information security policies, state-of-the-art data centers, and military-grade encryption – as used by US government, security agencies, and leading banks for data confidentiality. Our multiple world-class data centers host the IBackup application and store your data. We follow industry leading practices to ensure comprehensive data protection.
The IBackup application is hosted at our data centers in the United States. The data centers are designed with raised floors, HVAC temperature control systems with separate cooling zones and seismically braced racks. Security feature include smoke detection and fire suppression systems, motion sensors, 24/7 secured access, video camera surveillance and security breach alarms.
We have periodic third party reviews of our network infrastructure to check for known application and service vulnerabilities.
Your data resides on RAID-protected storage devices. We strongly recommend that you keep a local backup of your data, and our desktop clients now support encrypted local backups with private key option. Online Backup should be a complementary solution to local backup and not be the ONLY solution for disaster recovery.
IBackup can assist companies within the medical, accounting and legal professions to comply with these new standards to avoid the penalties now being levied against violators of HIPAA, SOX, GLBA, SEC / NASD, GDPR.