TrackVia provides the security that enterprises throughout the Fortune 1000 need, along with the scalability, always-on reliability and performance that they expect. From the physical security of our datacenter to granular user access levels, TrackVia provides you with a platform to rapidly design and deploy secure, scalable and reliable solutions to your business problems.
Datacenter Security
The physical foundation of our security is our state-of-the-art outsourced datacenter.
- SAS 70 Type II certified.
- Continuous video surveillance.
- Individually locked cabinets and cages.
- 3-way redundant back-up power generation, redundant chillers, redundant fire suppression, blast walls, concrete bunkers, dry moat to prevent vehicles crashing into building.
- Internet connectivity through multiple backbone providers, provided through fiber optic cables that enter the building on multiple sides to prevent cuts by construction work.
Network Security
At the network level, our security never sleeps.
- 24/7 expertly managed firewall.
- Firewall is configured with strict base-essentials configuration.
- 24/7 expertly managed intrusion detection.
- Database servers cannot be accessed from the outside world - only from application servers that each have a different password and different open ports.
- Use of non-standard ports for server access.
- Server passwords meet strong requirements for password stringency and are rotated frequently.
Encrypt Your Data, and Limit Access To It
Keep your enterprise's data safe with highly secure user authentication, end-to-end encryption, and IP filters. To ensure the highest levels of privacy, TrackVia incorporates:
- VeriSign 128-bit signed SSL certificates to secure web site authentication and data encryption.
- Specially encrypted database field type to store sensitive information such as credit card numbers and social security numbers.
- IP filters limit user access to only approved physical locations, rejecting login attempts with a valid username and password from non-approved locations.
Reliable Server Architecture And Infrastructure
TrackVia's platform offers 99.99% reliability, as well as "time machine" data recovery capabilities that allow you to roll back your data to nearly any single point in time.
- Data stored on duplicate, redundant storage devices in real-time.
- "Any point in time" data roll-back.
- No single point of failure; hot stand-by for each component.
- No virtualization technologies.
- Dedicated routers and switches.
- Built for speed.
Set and Enforce User Access Policies
Tightly control the types and means of collaboration and communication that your account users can engage in. Set and manage policies using a range of security options—from relatively open to highly secure. Limit communications within specific project groups, or users’ access to specific features.
- Record-level permissions, so that any user can view/edit/add/delete only the database records that are assigned to her.
- Field-level permissions, so that any user can view/edit/add/delete only the database fields that she's given access to.
- Database-level permissions, so that only authorized administrators for each database can make changes to the database fields, options and settings.
- Feature-level permissions, so that only authorized users can export information, email reports out of the database, etc.
- Import users and permissions from LDAP or Active Directory.
- Block user access outside of specific approved locations through IP filters.
Transparency and Audit Trails through Automated Change Tracking
At the most granular level, every action taken in TrackVia is recorded and made visible, providing an audit trail of all usage by all users.
- Database record changes are automatically time-stamped and user-stamped so that at any point in the future you'll be able to see who changed what, when.
- Data record changes are searchable.
- Full history of changes to database setups: field definitions, data types, formulas, etc.
- Access logs by user, database, and feature – down to the individual click.
Centralized User Administration
Manage users through a centralized console, and control each user's permissions for each database in a single location. Add, delete or update user information individually or in bulk.
- Streamline screen name and password administration by using LDAP or Active Directory synchronization to integrate your organization’s directory structure—including permissions, policies, and membership.
- Maintain a uniform, professional image for your organization by assigning screen names based on email addresses.
Our Policies About Our Employees
We carefully screen and supervise our own employees so that only trustworthy people with impeccable backgrounds become TrackVia employees.
- Criminal background checks on all employees.
- Employees can't access TrackVia outside of our physical office location.
- Employees can't access customer data without explicit permission from the customer at the time of access.
- TrustE certification.
- Regular audits of our employee usage logs to detect any potential unauthorized access or export attempts.