SAS 70 Type II compliant hosting provider

To augment internal efforts; gain perspective; and offer peace-of-mind for customers concerned with the increasing number of compliance issues - Fusepoint has completed the SAS70 Type II audit and we maintain compliance on an annual basis.

In addition, Fusepoint is both Tier 1 PCI DSS (Payment Card Industry Data Security Standard) compliant and CICA 5970 which is often referred to as the Canadian equivalent to the SAS 70 Audit. By making the investment in these important programs we adhere to best practices and ensure the applications our customers depend on are "always available" and "always secure".

All are similar audits that define professional standards used by independent auditors to rigorously assess the internal controls of service organizations. These programs have specific requirements for service providers managing customer data and focus heavily on the areas of compliance, security and access.

Administration and Organization: how the security team plans and manages security and the steps taken to embed security consciousness into our culture
Facilities: the infrastructure and redundancy created to ensure continuing operations along with physical access and perimeter security at each of Fusepoint’s data centres
Logical Access: how permission-based access to programs and data is created and managed for our internal systems and those we run for customers
Network Security: how multi-tiered network access “zones” are defined and managed to prevent unwelcome intrusion or other threats
Computer Operations: how technology and potential operational errors are prevented, identified, escalated, and corrected to provide continuous operations
Back-up and Recovery: the back-up schedules and control measures taken to ensure all data is recoverable and has off-site duplicate back-ups
Change Management: the stringent processes used to implement; test; and modify

Looking for a SAS 70 Type II compliant hosting provider? Look no further.