Friday 7 November 2008

Is my data secure ?

Understandably, this is one of the questions that we are asked most frequently by prospective users of i-map x.

The security of your data is paramount to us.

All data is stored on dedicated servers in a secure data centre. Each individual firm's data is stored in an individual database providing strong isolation between your valuable client data and that of other users. This, combined with SQL injection resilient technology eliminates the possibility of your data being viewed by other users. The data servers themselves are protected by firewalls and as such the actual databases cannot be accessed from the general internet but only from a different remote computer housed in the same data centre. This computer can only be accessed from our offices or the data centre meaning that the system is as secure as current technologies will allow.

The servers themselves are IBM systems utilising RAID disk technology and redundancy to maximise resilience and are monitored regularly for any errors. Data is backed up to different disks daily meaning that in the event of a file corruption problem your data could be recovered quickly.

2 comments:

Steve Smith said...

Looks good . . . . .
But, the FSA would expect me to follow a process of "due diligence"
The Data Protection act is very prescriptive about who we allow to hold our client data.
Please would you assure me that the data would never be used for marketing purposes, or even seen by your staff.
Please would you also assure me that the data could never be lost on a "disk" or "laptop" - as hits the media from time to time.
Please would you outline your service levels, downtime limits etc.
I feel cheeky asking these questions but I just know that the FSA would criticise me if I had not looked in to these matters.
Many thanks . . . .

i-nvent admin said...

Steve, thanks for getting in touch, by way of a response to the specific points you have raised:

1. Your data will never be used for marketing purposes, it will not be seen by our staff unless you were to ask us to do something specific with it, e.g. copy it into a spreadsheet perhaps, or in the unlikely event of any problems needing to be resolved.

2. The data resides in a data centre in Edinburgh, we do not take any copies of data onto laptops etc. Backups are copied onto another server within the data centre.

3. We endeavour to ensure that any downtime due to essential maintenance will take place outside of office hours.

Hope this helps though please let me know if you require further clarification of any points.