We understand that security is a paramount concern for any business, and we take our clients' data security extremely seriously.

That is why accountsIQ employs a sophisticated, multi-layered security model and a set of important safeguards, to protect your data online.

We work in tandem with OpSource, the experts in delivering web applications and software as a service for on-demand companies. Our architecture's security model is externally validated by independent security experts.

We believe accountsIQ is far more secure than most systems running on internal company servers because it has:

• Top-level firewall protection against intrusion – and any potential threats are monitored 24/7 and notified to us immediately
• Automatic data backups sent each night to a remote backup facility
• Systematic monitoring of the latest security patches and anti-virus updates and their immediate implementation where necessary
• Best practice procedures and systems for data security, facility security and user security

Data security

accountsIQ data is protected using the following security controls:

• System access requiring three levels of authentication – company ID/username/password
• Industry-leading Secure Sockets Layer (SSL) encryption technology to protect the transfer of data online and safeguard data against unauthorised access and intrusion
• Servers dedicated solely to our online accounting service
• Independent databases for each client – no data is shared within the same database
• Data files locked using Microsoft Windows and SQL Server 2005 security and permissions
• Hard drive backup by our hosting partner in case of hard drive failures, and data clustering replication to a secondary server in case of main server failure

Facility security

All accountsIQ client data is hosted in OpSource's high-security data storage facility. The off-site facility’s security features include:

• Biometric scanning and electronic key access for internal security
• CCTV camera coverage of entire facility, including cages
• Back-up generators and UPS (uninterruptible power supply) systems
• Automatic alarm system notification of law enforcement agencies
• Shipping and receiving area walled off from hosting collocation areas

OpSource is SAS 70 Type II compliant. SAS 70 is an auditing standard developed by the American Institute of Certified Public Accountants (AICPA) to evaluate the internal controls of a service provider. The Type II audit conducts a series of tests to ensure that the service provider is actually following documented internal procedures and processes to achieve the service provider’s control objectives.

User security

accountsIQ's flexible security system allows administrators to control which functions each user within a client company can access and view.

This allows for a clear and secure delegation of tasks and system access according to job requirements. You have total control over who accesses data, and what they can see and do through predefined user profiles.

For example:

• Owner managers can be set up with access to summary management reports
• Data entry personnel can be set up with access to order entry screens only

Further Information on Security

• To find out more about our security model, please download our Security Factsheet
• Read more about OpSource's SAS 70 Type II compliance solutions
• Download a datasheet about how OpSource implements its security strategy

next page: accountsIQ Resources