Data Center Compliance
Choose a Data Center Dedicated to Regulatory Compliance & Stringent Internal Controls
By choosing Green House Data for your cloud hosting or colocation services, you can feel confident that your business’ critical data is secure and that your data center provider is compliant with the policies and controls you have in place for your organization and all associated industry regulations.
As an SSAE 16, Type II Compliant data center, Green House Data follows stringent internal controls over our infrastructure and cloud services to meet even the highest of standards for regulatory compliance acts, including:
- Sarbanes-Oxley (SOX)
- Health Insurance Portability and Accountability Act (HIPAA)
- Payment Card Industry (PCI)
- Gramm-Leach-Bliley (GLBA)
Learn more about the cloud security and data center facility security controls that Green House Data employs.
Contact us to see how our compliant data center can help you.
Why choose a data center compliant with the SSAE 16 attestation standard?
The fact that Green House Data has achieved compliance with the SSAE 16, Type II demonstrates that we uphold the latest security and audit standards. This designation is especially important for companies that are publicly traded or those governed by strict industry regulatory entities such as organizations within the hospital, government or banking industries.
The SSAE audit of Green House Data reviewed the policies and procedures of the company in order to verify that the organization has put in place controls to mitigate risk and deliver high performance services. The audit analyzed the controls around multiple aspects of the company’s entity-level, focusing on controls around access (both physical and logical), change management processes and client control considerations.
What is the SSAE 16, Type II?
On June 15, 2011 the SSAE 16 officially replaced the obsolete SAS 70 as the new audit standard. The key differences between SAS 70 and SSAE 16, Type II are that the SSAE 16 aligns the United States service organization reporting standards with the International Standard for Engagement, ISAE 3402. There is also the addition of a management assertion section within the audit report regarding design and operating effectiveness. Additionally, the SSAE 16 Type II requires tracking changes to controls, documentation on what changes are made and who approves them.
Why is SSAE 16, Type II better than Type I?
Green House Data holds the Type II distinction of the SSAE 16 stating that our data center facility capably operates with both design proficiency for our internal controls and the operational effectiveness of this design for at least a six month time period. It is important to choose a data center with the Type II differentiation, as Type I only measures adequacy for a specific date in time and does not audit operational effectiveness, thus making SSAE 16, Type II a much more exceptional designation for a data center provider to carry.
Request a copy of our SSAE 16, Type II Attestation.
