SAS 70 Type II Certification
At Hosting.com, the successful completion of a SAS 70 Type II audit for certification was essential. It's testimony to the fact that we have the necessary procedures in place to fully secure and protect clients' online data assets within our corporate data center facilities.
Recognized internationally as an auditing standard, a SAS 70 Type II Certification shows that a service company has completed an in-depth audit of their control activities, usually information technology and related processes, by an outside third-party.
As audited by the accounting firm Chilton & Medley, Hosting.com's certification verifies that our controls in hosting and IT infrastructure services including security practices, physical and logical facility access, environmental controls, data backups, customer service practices, and management policies were found to be operating with sufficient effectiveness. With this certification in hand, Hosting.com clients are assured that their online data assets are secure and will continue to be secure, as we recommit to a SAS 70 Type II audit each year.
Benefits of Partnering with a SAS 70 Type II Certified Host
- Provides a third party confirmation that the services promised and supplied by Hosting.com are carried out in a controlled fashion.
- Verifies that the enacted controls are fair and were properly designed to meet their specific purpose.
- Provides clients with an independent assessment of the controls' operating effectiveness as calculated over a period of time.
- Supplies clients with the resulting audit report which can be used in place of performing the procedure in-house for compliance with various government regulations including the Sarbanes-Oxley Act.
Requesting Hosting.com's 2008 SAS 70 Report
A SAS 70 report details an organizations controls, which includes aspects of security, and business infrastructure. This information can and always should be considered sensitive. As Hosting.com provides services to hundreds of thousands of customers, protecting the data assets of our customers is the highest priority to us, and the reason these guidelines are in place.
If you would like to request a copy of Hosting.com's SAS 70 Request, please review the guidelines below:
- All parties must sign a Non-Disclosure and Confidentiality Agreement to request the SAS 70 Report.
- Hosting.com will provide the requestor with a Non-Disclosure and Confidentiality Agreement (NDA). EDITED OR REPURPOSED NON-DISCLOSURE AGREEMENTS WILL NOT BE ACCEPTED.
- The NDA will be good for one occurrence of the SAS 70 Report, or one year. Any NDA over a year old will no longer be valid, and the requestor must sign a new NDA.
- Once a SAS 70 Report has been disclosed, the "Confidential Items" condition of that particular NDA will have been considered fulfilled. Any future requests for a SAS 70 Report will require the signing of a new NDA.
- The SAS 70 Report is intended for customers of Hosting.com only. Recipients of the SAS 70 Report do not have approval to send the report to any outside parties, as per the terms of the Non-Disclosure and Confidentiality Agreement. Failure to honor this Agreement could be subject to legal action.
- Hosting.com reserves the right to refuse the report to any requestors.
- Any exceptions for requestors that are not currently Hosting.com customers are made at the sole discretion of Hosting.com.
- A customer requesting the SAS 70 Report MUST be in good standing, and must NOT be late on payment.
- Hosting.com can offer a letter from our auditors, verifying that we have completed the SAS 70 examination, which our customers may share with their clients and prospects.