Security
Encryption
vWork uses encryption for all client-facing browser and mobile web traffic and supports the latest standards including AES 128+256 and TLS 1.2. More detail can be found here.
Physical Environment
vWork runs on Amazon Web Services, a secure, durable technology platform with industry-recognized certifications and audits: PCI DSS Level 1, ISO 27001, FISMA Moderate, FedRAMP, HIPAA, and SOC 1 (formerly referred to as SAS 70 and/or SSAE 16) and SOC 2 audit reports. AWS services and data centers have multiple layers of operational and physical security to ensure the integrity and safety of your data.
Physical Security
Access to the vWork server cluster is protected by keycard protocols, biometric scanning protocols, and around-the-clock interior and exterior surveillance. In addition, access is limited to authorized data center personnel; no one else can enter the production area without prior clearance and an appropriate escort. Every data center employee undergoes multiple and thorough background security checks before they are hired.
Data Security
All vWork customer data is retained in secure local and offsite storage facilities. vWork ensures data protection with 24/7 hourly backups which are held in multiple offsite locations. vWork performs regular automated disaster recovery to warm systems, to ensure that downtime and data loss is minimized in the unlikely event of multiple hardware failures.
Network Security
vWork uses state-of-the-art network security practices to ensure that systems and data are fully protected from unauthorized access. vWork uses Amazon AWS VPC Security. In addition, all internal systems require encryption through SSL or IPsec. All core network security configuration and management is performed by certified engineers.
Redundancy
All vWork production systems are highly redundant. In the unlikely event of hardware component failure, individual systems can be taken offline and repaired without the need for downtime. All power supply and network services are supplied from multiple sources; in the event of a single upstream supplier failure, no production systems are affected.
Where possible vWork takes advantage of High Availability systems like Amazon RDS. Where this is not an option, vWork ensures that services are shared across multiple availability zones and take advantage of auto-scaling.