When you want to protect your valuables, you place them in a safe deposit box.

But, how do you protect your data???

For most people, it is difficult for people to trust or even understand a safe deposit box that is not visible or tangible.

For this reason, it is important to thoroughly explain how your data is protected so you can feel good about placing your sensitive information online.

Our security practices can be categorized into 3 groups:

Application Security

Since every company's requirements are different, application security can be strict, or it may be flexible enough to allow various permissions. By default, application security is strict. All of your files are private until you explicitly grant each contact access to certain files.

Custom Permissions for Administrators

Fine-grained administrative controls for those wishing to deploy varying levels of administrative access.

Folder Access Control

When it comes to on-going relationships with your clients or collegues, you may want to invite them to a shared folder. Folders can be shared in two different ways.

Folders may be shared on an open and collaborative basis. With this type of shared folder, all members of the folder can "see" and interact with one another. All members can upload files and exchange comments with each other.

Another type of shared folder can be referred to as a "blind folder". With this type of folder, you are the only person who can upload to this folder. So, although this folder is shared, members can only see files that have been uploaded by you.

Because members do not have uploading privileges, they have no way of knowing that any other members exist. Therefore, members cannot "see" or interact with each other.

It is also possible to have a folder completely private where only you see the content. Of course, this would not be considered a shared folder, but you could share individual files from this folder.

Activity Tracking

All contact activity and file history is recorded to the activity records.

The activity records will track all logins, all uploads and downloads, file viewing, folder creation, file movement from folder to folder, user creation, IP addresses and numerous other activities. Activity records are permanent and cannot be altered or removed, not even by your administrative staff.

Require Signatures on Electronic Non-Disclosure Agreements

You can require contacts to electronically sign a Non-Disclosure Agreement the first time they log in to their PerfectShare account. In the security settings, you can edit this agreement to meet your company requirements. All signatures on these documents are recorded to the users' Activity Record.

Enforce Password Rules Through the Security Settings

Each user must login with a secure username and password. Under the security settings, password policies can be modified to ensure internal policies are enforced. Some of these options are displayed below.

Superior SSL Security

PerfectShare uses the most advanced technology to encrypt data during all communications with your account. This means your data is protected in transit as well as while it is stored on PerfectShare. Your company can send, recieve, share and store data with confidence.

Guaranteed HIPAA Compliance

Health care providers will wish to know PerfectShare uses centers that implement HIPAA compliant controls and security measures to ensure your protected health information (PHI) is always secure, private, and available.

SAS 70 Certified Facilities

What is SAS 70?

SAS 70 was the original internationally recognized standard reporting on data center operational processes and practices, but has since been replaced by SSAE 16 (Statement on Standards for Attestation Engagements) by the AICPA (American Institute of CPAs). Although SAS 70 is being replaced by SSAE 16, SAS 70 is still recognized as superior data center standards.

SAEE 16 Certified Facilities

What is SAEE 16?

In April 2010, the AICPA (American Institute of Certified Public Accountants) announced that SAS 70 would be replaced by SSAE (Statement on Standards for Attestation Engagements) 16. SAEE 16 certification verifies that the controls and processes set in place by a facility are followed.

Our data center has a high level of security, guarded by 24/7/365 digital surveillance. The closed circuit cameras throughout the data center monitor both the interior and exterior facilities around-the-clock. Keycard locks on all the paths to sensitive areas and biometric palm scans, restrict the access of unauthorized personnel.

PerfectShare uses two facilities. One is located within a carrier-class data center located in Clifton, New Jersey, USA. The other is located in Plano, Texas. Both facilities use multiple control mechanisms to ensure the highest level of physical security. These facilities are state-of-the-art data centers that provide a highly secure physical infrastructure, including the latest in biometric authentication, video surveillance, and around-the-clock security officers. The centers are engineered to eliminate any single point of failure, with multiple layers of redundancy in power systems, HVAC, and fire detection and suppression. All systems are monitored 24x7 through a Network Operations Center (NOC).

Specific security measures include multi stage key card access and then hand geometry readers to prevent card key theft. All visitors to the datacenters must check in and out of the facility. The goal is to provide maximum redundancy in every facet of the datacenter environment to facilitate 100% uptime for every PerfectShare account.

Environmental conditions are kept optimal through sophisticated power conditioning systems, redundant air conditioning units, UPS battery backup, diesel generators, and gas-based fire suppression systems. All servers are housed in locking cabinets within locked cages.