PROTECTION

Policies

CloudCover has privacy and security-conscious policies that apply to all of our information handling practices.

• Contractual Privacy Protection for Customers
  • CloudCover’s contracts include confidentiality provisions that prohibit us from disclosing customer confidential information, including customer data, except under certain narrowly defined circumstances, such as when required by law.
  • CloudCover agrees not to access customer’s accounts, including customer data, except to maintain the service, prevent or respond to technical or service problems, at a customer’s request in connection with a customer support issue, or where required by law.
• Code of Conduct, Confidentiality Agreements, and Information Security Policies
  • Every CloudCover employee and contractor must follow CloudCover’s code of conduct, sign confidentiality agreements, and follow CloudCover’s information security policies.

Privacy Statement

• For information collected on CloudCover’s Web site, cloudcover.it provides assurances around the types of information collected, how that information may be used, and how that information may be shared.
• CloudCover offers individuals the opportunity to manage their receipt of marketing and other non-transactional communications.
• CloudCover offers individuals the opportunity to update or change the information they provide.

Practices

CloudCover’s comprehensive privacy and security program includes communicating with personnel and customers about current issues and best practices.

• Internal Training and Communications for CloudCover Personnel
  CloudCover strongly encourages all of our customers and users to adopt industry-standard solutions to secure and protect their authentication credentials, networks, servers, and computers from security attacks.
• Customer End User Awareness
  CloudCover strongly encourages all of our customers and users to adopt industry-standard solutions to secure and protect their authentication credentials, networks, servers, and computers from security attacks.
  • We communicate with our customers about current issues and trends through our Trust web site.
  • We email end users about specific security issues when warranted.
  • We publish a Security Implementation Guide for customers to learn more about how to implement customer-controlled security settings. The Security Implementation Guide is available in the Help & Training section of the CloudCover service.
  • The Security section of the Trust Web site includes a security webinar and various security-related white papers.

People

CloudCover has multiple individuals responsible for security and security-related matters. Additionally, all CloudCover personnel are required to follow CloudCover’s confidentiality, privacy, and information security policies.

Technology

CloudCover maintains a comprehensive array of technical measures to protect the CloudCover service and offers a robust set of customer-controlled settings to further heighten privacy and security protection.

Default Privacy and Security Features

• Application features that protect customer data:
  • Connection to the CloudCover service is via secure socket layer/transport layer security (SSL/TLS), ensuring that our customers have a secure connection to their data. Individual user sessions are uniquely identified and re-verified with each transaction.
  • Customers passwords are not accessible by CloudCover personnel.
  • Application logs record the creator, last updater, timestamps, and originating IP address for every record and transaction completed.
• Logical separation of customer data:
  • Hardware and software configurations are designed to provide secure logical separations of customer data that permit each customer to view only its related information.
  • Multitenant security controls include unique, non-predictable session tokens, configurable session timeout values, password policies, sharing rules, and user profiles.
  • The CloudCover service supports delegated authentication.
• Redundancy and Scalability
  • The CloudCover service is highly scalable and redundant, allowing for fluctuation in demand and expansion of users while greatly reducing the threat of long-term outages.
• Disaster Recovery
  • All customer data is stored in secure data centers and is replicated over secure links to a disaster recovery data center. This design provides the ability to rapidly restore the CloudCover service in case of an emergency.
• Backups
  • In addition to our disaster-recovery capabilities, customer data is also backed up in the cloud.

Customer-Controlled Privacy and Security Settings

• Customers may determine which of their respective designees can access different categories of data.
• Customers may set customizable password rules.
• Customers may define log-off times for inactivity.
• By default, CloudCover’s Identity Confirmation feature automatically recognizes whether a user is logging in from an IP address or device that has been previously used. Unrecognized IP addresses or devices prompt identity re-verification.