EZFacility provides state-of-the-art security to ensure that your customer data is never compromised. At EZFacility, we know that security is crucial to you, that’s why it’s our top priority. We devote significant resources to continually develop our world-class security infrastructure. The result: We deliver unsurpassed security and privacy of our customers’ information.
When you sign up with EZFacility, you’ll enjoy the protection and peace of mind that only our world-class security infrastructure can provide.
Our security measures include the following:
Our production equipment is collocated at a facility that provides 24-hour physical security, palm print and picture identification, redundant electrical generators, redundant data center air conditioners, and other backup equipment designed to keep servers continually up and running.
The network perimeter is protected Cisco Pix firewalls and monitored by intrusion detection systems – all sourced from industry-leading security vendors. In addition, a team of dedicated security experts monitors and analyze firewall logs to proactively identify security threats.
EZFacility leverages the strongest encryption products to protect customer data and communications, including 128-bit THAWTE SSL Certification. The lock icon in the browser indicates that data is fully shielded from access while in transit.
Users access EZFacility only with a valid username and password combination, which is encrypted via SSL while in transmission.
Our robust application security model prevents one customer from accessing another’s data. This security model is reapplied with every request and enforced for the entire duration of a user session.
Inside of the perimeter firewalls, systems are safeguarded by network address translation, port redirection, IP masquerading, non-routable IP addressing schemes, and more.
EZFacility enforces tight operating system-level security by using a minimal number of access points to all production servers. We protect all operating system accounts with strong passwords, and none of our production servers share a master password database. All operating systems are maintained at each vendor’s recommended patch levels for security and are hardened by disabling and/or removing any unnecessary users, protocols, and processes.
Database access is controlled at the operating system and database connection level for additional security. Access to production databases is limited to a number of points, and production databases do not share a master password database.
All data entered into the EZFacility application by a customer is owned specifically by that customer. Our employees do not have direct access to the EZFacility production equipment, except where necessary for system management, maintenance, monitoring, and backups.
All networking components, SSL accelerators, load balancers, Web servers, and Database servers are configured in a redundant configuration. All customer data is stored on a primary database server that is mirrored with a backup database server for redundancy. All customer data, up to the last committed transaction, is automatically backed up on a nightly basis.