vWork uses encryption for all client-facing browser and mobile web traffic and supports the latest standards including AES 128+256 and TLS 1.2.
vWork runs on Amazon Web Services, a secure, durable technology platform with industry recognised certifications and audits: PCI DSS Level 1, ISO 27001, FISMA Moderate, FedRAMP, HIPAA, and SOC 1 (formerly referred to as SAS 70 and/or SSAE 16) and SOC 2 audit reports. AWS services and data centres have multiple layers of operational and physical security to ensure the integrity and safety of your data.
Access to the vWork server cluster is protected by keycard protocols, biometric scanning protocols and around-the-clock interior and exterior surveillance. In addition, access is limited to authorized data center personnel; no one else can enter the production area without prior clearance and appropriate escort. Every data center employee undergoes multiple and thorough background security checks before hire.
All vWork customer data is retained in secure local and offsite storage facilities. vWork ensures data protection with 24/7 hourly backups which are held in multiple offsite locations. vWork performs daily automated disaster recovery to warm systems, to ensure that downtime and data loss are minimised in the unlikely event of multiple hardware failures.
vWork uses state-of-the-art network security practises to ensure that systems and data are fully protected from unauthorized access. vWork uses Amazon AWS VPC Security. In addition, all internal systems require encryption through SSL or IPsec. All core network security configuration and management is performed by certified engineers.
All vWork production systems are highly redundant. In the unlikely event of hardware component failure, individual systems can be taken offline and repaired without the need for downtime. All power supply and network services are supplied from multiple sources; in the event of a single upstream supplier failure, no production systems are affected.