Security

All data is encrypted and transferred using industry standard AES-256 encryption and TLS transmission that is widely used by military, government and financial institutions worldwide ensuring that nobody other than the authorized recipients can read any client information.

Data security is paramount with any system which deals with important data. For our InfoAnywhere users, we take data backup very seriously. There are systems in place to ensure that at any given time there are at least four copies of less-than-24-hour-old data available. First, there is the live copy of data, on the server, which is constantly being updated in real time. Secondly, we have a cloned standby server which is updated every few minutes that can be brought to life in the event of any downtime with the primary server. Third, every evening, a data backup is taken off the server and stored onto two secured, alternate backup servers, in separate data-centers. Finally, each organization is responsible for downloading their own copy of their system data and storing it securely on their sites. These backups may be stored so that later-on, restores of historical or point-in-time data may be possible.

To ensure the security of information while on the server, access to the data is only granted to users which have a valid user ID and password. The system can be configured to allow several levels of access to the information based on how each user is set up. Additionally, all passwords are stored in an encrypted format (that even InfoAnywhere support cannot decrypt) within the database to further prevent the possibility of compromise. Users can be added and removed by administrators at any time.

Two-factor authentication (also known as 2FA) provides unambiguous identification of users by means of the combination of two different components. These components may be something that the user knows, something that the user possesses or something that is inseparable from the user. A good example from everyday life is the withdrawing of money from a cash machine. Only the correct combination of a bank card (something that the user possesses) and a PIN (personal identification number, i.e. something that the user knows) allows the transaction to be carried out. InfoAnywhere requires users to be in possession of a physical USB 'key' that is called for during the login process to ensure that the account cannot be accessed even if the username and password is compromised.