- Contact Us
Meet Compliance Requirements with Net Data Centers IaaS
In today’s always on digital age, information security is an extremely important factor when deciding to outsource your infrastructure. Whether you are in the ecommerce business, if you host sensitive health or financial information, or if your organization simply demands the highest levels of security, you understand the role that compliance plays in demonstrating how you protect your data. At NDC we understand the significance of meeting compliance requirements. Our Data Centers, infrastructure, and processes are compliance-ready and have been tested/audited since 2007 by a 3rd party to ensure that the appropriate physical controls and information security policies are in place to protect your data and meet these standards.
Service Organization Controls (SOC) Reports
Net Data Centers has successfully attained SOC 2 Type 2 reports for its Los Angeles (El Segundo, Downtown Los Angeles), Northern Virginia (Ashburn,Reston), and New Jersey data centers.
The American Institute of Certified Public Accountants (“AICPA”) recently created the Service Organization Control Report framework, and replaced SAS 70 with SSAE 16. Under the new framework, service organizations that handle customer financial data would now receive a SSAE16/SOC 1 report. IT Infrastructure-as-a-Service (IaaS) solution providers like Net Data Centers are being audited under a new standard based on AT section 101 of AICPA professional standards. These new reports provide greater definition around internal controls.
The SOC 2 Report focuses on internal controls related to security, availability, confidentiality, processing integrity and privacy—validating that the system is protected against unauthorized physical and logical access. As with SAS 70 reports, an organization can receive either a Type 1 or a Type 2 report. Type 1 merely reports on the suitability of the controls, while Type 2 tests the effectiveness of the controls. The SOC 2 Type 2 report not only updates the SAS 70 standard by examining the suitability of the design of a provider’s internal controls, it goes a step further by documenting the operating effectiveness of those controls. Net Data Centers SOC 2 Report is available to customers and prospective customers upon request and execution of a Non-Disclosure Agreement (NDA). Please contact your Account Manager if you would like to have a copy of the report.