Asure Software takes security seriously and utilizes world-class technology and procedures to protect your company's data. Asure Software has selected SAVVIS, Inc. as its hosting partner to ensure its customer service and data are handled with maximum reliability, availability and security. SAVVIS (NASDAQ: SVVS) is a global IT utility services provider that leads the industry in delivering secure, reliable, and scalable hosting, network, and application services. With an IT services platform that extends to 45 countries and as the carrier of more than 20% of the world's Internet routes, SAVVIS is one of the world's largest providers of IP computing services.

Following are some of the measures Asure Software takes to protect our clients' data:

Building Security

The AsureForce Time data center is Hurricane Level 5 secure, with bulletproof exterior walls comprised of cinderblock and brick face. The building is monitored 24 hours a day, 7 days a week by professional security guards for real time checks of activity via CCTV video cameras installed at both interior and exterior locations. In addition to monitoring the feeds from the cameras from their central security office, the security guards control access to the building through an identity check and sign-in process. Only personnel specifically listed are allowed into the cage space. To access the data center, personnel must provide a valid form of picture identification and pass through a biometric device previously programmed for that individual's physical attributes.

Electrical Power

There are three diverse sets of power conduits entering the data center from three diverse transformers. Mission-critical electrical loads at are sourced by parallel, redundant UPS systems, which are configured with automatic static bypass and manually operated full-maintenance bypass circuits. Electricity backup capabilities at the AsureForce Time data center are essentially unlimited. Short-notice refueling contracts for the six large diesel generators dedicated to AsureForce Time data centers are maintained with multiple vendors. Heating And Cooling The heating, ventilation, and cooling (HVAC) systems, fully redundant themselves, are monitored every hour, 365 days a year. Temperature, maintained at 72° F (within 2°), and humidity, maintained at 45%, are carefully regulated. All mission critical systems have 24x7 maintenance contracts with a maximum of two hours response time.

Fire Detection And Suppression

The fire suppression system at the AsureForce Time data center is built around the VESDA (Very Early Smoke Detection Alarm) detection system - a state-of-the-art "sniffer" system that detects smoke from the earliest stages of combustion. This detection system is augmented by heat detection and dry-pipe sprinkler systems.

Network

The AsureForce Time service is delivered through the Internet via the SAVVIS network, which is one of the fastest, most reliable connectivity options in the industry. The AsureForce Time data center has two fiber Internet connections coming into the building at different points, one below ground. Two telco Local Loop Providers are used for further redundancy in case of telco maintenance. All SAVVIS network infrastructure is completely redundant and monitored 24x7. Ample bandwidth is provided to exceed current customer demands as calculated by base and burstable contracts in place, and trend analysis keeps it ahead of growth requirements.

Managed Firewall

Front-end access to the AsureForce Time network is controlled by a SAVVIS managed firewall. The SAVVIS firewall group, security professionals located around the country and available 24x7, monitor and manage this firewall.Firewall logs are checked on a regular basis and suspicious traffic patterns investigated. All changes to the firewall configuration are reviewed and applied only by the firewall group, no other access is allowed, and strict change control guidelines are followed.

Managed Backups

AsureForce Time data backups are managed by the SAVVIS Managed Backup Service. Pertinent data is automatically backed up through a dedicated network to a secure AsureForce Time virtual data center (VDC) within the SAVVIS data center. The SAVVIS Managed Storage department, a central group of SAVVIS backup engineers, closely monitors all backup jobs scheduled for each day. Two weeks of backup data is stored at all times. Restores can be requested at any time, either to the original location, or to an alternate.

Monitoring

AsureForce Time systems are monitored on a 24x7 basis. If any system fails, an escalation procedure, defined by AsureForce, assures that attention to the problem by the correct personnel is as swift as possible.

Server Infrastructure

Asure Software uses a combination of Cisco and Dell equipment to provide the infrastructure necessary to support its customers. Both are industry leaders with extensive service organizations and easy access to replacement parts. The equipment is racked in a dedicated VDC which is locked at all times, preventing any unauthorized access. All systems run Microsoft's Windows, SQL Server and associated .NET services, and are maintained at current security and service pack release levels to ensure breaking security issues are immediately addressed.

As part of the best practices approach used in designing the site, the web layer is separated from the database layer. Access to the web layer is governed by the managed firewall and open to the Internet only on specific ports. Network traffic from the web layer to the database layer is also restricted and controlled by the managed firewall, helping to limit exposure in case any systems on the web layer are compromised.

128-bit Encryption Technology

Asure Software encrypts or hides data in such a way that the original information can only be recovered through a corresponding decryption process. This technology is called SSL (Secure Socket Layer) and is the industry standard method for protecting web communications. The SSL security protocol provides 128 bit data encryption, server authentication, message integrity, and optional client authentication.

Network Intrusion Detection Service

Asure Software protects clients from malicious activity by monitoring network traffic for any activity that may be perceived as an attack or breach. Asure Software also guards against intrusion by limiting the number of failed log-in attempts. After three consecutive failed log-ins Asure automatically resets a user's password and notifies both the user and the system administrator by e-mail of the potential security breach.

Internal Security Procedures

Asure Software is focused on our responsibility for the confidentiality, integrity and availability of data entrusted to us by our customers. Asure implements and audits internal controls addressing business continuity, control and access of information, personnel security, physical and environment security, communications and operations management, equipment and asset management, incident management and notification, and regulatory compliance.

Rest assured: the safety and security of your company's most sensitive data is Asure Software's #1 concern.