EDDS Vault

Whether you are in need of a tool to manage compliance or a system to securely collaborate with your staff, clients, or other parties, the EDDS Vault Software-as-a-Service (SaaS) offering is for you. Since 2000 we have helped our clients manage their highly confidential information and meet compliance regulations such as HIPAA, the USA PATRIOT Act, Sarbanes-Oxley, the Gramm-Leach-Bliley Act (GLBA), and others. We bring this same focus on security to our EDDS Vault SaaS offering.

Any information you upload or download is protected. We use 128-bit SSL (Secure Sockets Layer) encryption, the industry standard for ensuring data privacy and integrity on the Internet. In addition, your documents on our servers are encrypted with the same technology adopted by the U.S. government in 2000. With AES, documents on our servers are unreadable to unauthorized users.

Our servers are located at a controlled-access hardened data center that meets rigorous standards. For example, it is SAS70 II certified, which means it passed a high-level audit based on the American Institute of Certified Public Accountants (AICPA) Statement on Auditing Standards No. 70. It also meets the physical data portion of PCI compliance (Payment Card Industry Data Security Standards).

User access is strictly controlled. Only users authenticated via a strong password can access information on EDDS Vault. The information any user can access depends on the role and group to which the user belongs in the system. The application "times out" when the application is open but has had no activity for a period of time. Our system logs all access to content.

Your data is backed up in multiple ways. Within our system, all data is stored in two separate locations. In addition, full backups are made weekly and incremental backups daily. The backup media is taken offsite to a secure commercial storage facility.