SAS 70 Data Center Compliance

Hosting.com has successfully completed the annual SAS 70 Type II audit. Through the assistance of the independent auditing firm of Clifton Gunderson, LLP, Hosting.com completed the SAS 70 Type II audit of its internal control environment. Clifton Gunderson audited Hosting.com's processes and policies to ensure compliance and consistency with the documented controls. This consisted of onsite audit reviews and testing at each facility and datacenter, and meetings with Hosting.com's management team.

What is SAS 70?

Statement on Auditing Standards No. 70, commonly referred to as SAS 70, is an auditing statement developed by the American Institute of Certified Public Accountants (AICPA). SAS 70 is designed to allow auditors to review the controls established by service organizations. Independent auditors review the control objectives and activities to ensure the controls are valid and enforced.

A control is a method used to ensure a policy and/or procedure established by a service organization is followed. Controls are in place at Hosting.com to ensure our user organizations are protected. Hosting.com's controls include building access/security, data center access/security, data storage, customer information security and change procedures of hardware/software.

There are two types of SAS 70 auditor reports, Type I and Type II.

• Type I audits focus on the validity of the controls in operation at the service organization to ensure they complete the specified control objectives.
• Type II audits focus on the Type 1 controls that are in place as well as how they are executed over a specific period of time.

Hosting.com has completed a SAS 70 Type II audit.

What this means for Hosting.com

As a service organization, Hosting.com can issue a copy of the SAS 70 Type II audit report to user organizations to verify our processes and procedures (controls) are adequate for their dedicated and/or colocation hosting needs.

Ongoing SAS 70 Type II audits ensure Hosting.com is keeping their policies and procedures up to date as technology and business needs change. As these audits are performed by independent auditors, this ensures Hosting.com is continuing to create and implement proper controls.

What this means for our hosting customers

As a user organization, potential, as well as existing customers can request a copy of the SAS 70 Type II audit report to ensure Hosting.com has proper controls in place. Customers will no longer need to perform their own audits.  As these audits are performed by independent auditors, any potential bias is removed from the reports.