...
Our web interface uses 256 bit TLS encryption
iOS apps use 256 bit TLS encryption for data transfers
Database-to-database transfers (for the CDN server network) are encrypted
All passwords are SHA hashed
All Active911 personnel with access to the data have passed criminal background checks
...
Data Centers
We use multiple data centers . Our primary data center is SAS-70 Type II / SSAE-16 Certified, located in the heart of downtown Dallas, TX. It is in a Tier 3+ facility on the same protected power grid as Dallas 911 and the local hospitals. Power is sent to the data center from four different substations, requiring all four substations to go offline before power to the building is interrupted. Additionally, the data center is serviced by water feeds from the north and south of the building.located in Oregon and Ohio. Our datacenters have been validated by third-party testing performed against the NIST 800-53 Revision 4 controls, as well as additional FedRAMP requirements. Data center locations are carefully selected to mitigate environmental risks, such as flooding, extreme weather, and seismic activity. Each data center has 24/7/365 on site security
...
Card access required to gain access to parking and building lobby, biometric hand scanner required for data center entry
...
Annual SSAE 16 & PCI-DSS Audits
...
Multiple 360 degree cameras with 10x zoom, high speed recorders with DV cassette tapes, hard drives to eliminate down time for tape swaps and over recording
...
True A+B (2N) power configurations
...
2(N+2) Transformers and feeds
...
All UPS and Generator deployments provide (2N) redundancy
...
Entire cooling system is designed with at least N+1 redundancy
...
Multiple utility feeds from the CBD grid
...
Feeds to building are concrete encased
...
80,000 gallon reserve make-up water tank
We also utilize a smaller Oregon datacenter for geographic diversity and redundancy.
Data centers are designed to anticipate and tolerate failure while maintaining service levels. In case of failure, automated processes move traffic away from the affected area. Core applications are deployed to an N+1 standard, so that in the event of a data center failure, there is sufficient capacity to enable traffic to be load-balanced to the remaining sites.
Physical access points to server rooms are recorded by Closed Circuit Television Camera (CCTV). Images are retained according to legal and compliance requirements.
Our data center electrical power systems are designed to be fully redundant and maintainable without impact to operations, 24 hours a day. Data centers are equipped with back-up power supply to ensure power is available to maintain operations in the event of an electrical failure for critical and essential loads in the facility.
Details
A sample of typical data sent through our system looks like this:
...