Security & Architecture | Factsheet Security & Architecture

Securely share and collaborate on files with any browserenabled PC, laptop, tablet, or mobile device.

Overview
SkyDox delivers enterprise-class data security and availability using the latest technology and best practices to safeguard digital content, prevent unauthorized access, and guarantee availability. A range of carefully selected, accredited data center partners host the SkyDox cloud infrastructure across Europe, Asia, and North America, allowing organizations to locate their data in a region of their choice.

Key Features
All transactions authenticated against user accounts Password-protected file and link sharing with permissions-based access per user and per file Flexible permissions settings to choose whether members can post and read comments, download/print PDF versions, download the file in its original format, upload changes, view tracking data, add or remove files, or access with a link Administration controls for access revocation and permissions adjustments Comprehensive reporting and audit trails to enable file-level tracking and access Sophisticated data encryption with 128-bit Secure Sockets Layer (SSL) encryption in transit Network protection and segregation with multiple connectivity and CDN partners Data center security and availability, including multilayer physical security and redundant power Privacy and information security policies set to comply with HIPAA, SAS 70 Type II, and ISO 27001

Data Security
User authentication - All transactions with SkyDox must be executed from within the context of a personal, authenticated user account. Access to view or edit content stored or shared with the SkyDox platform is only possible once users have been authenticated by creating unique passwords and verifying their email addresses. SSL encryption - SkyDox encrypts personal information and digital content before it leaves the users computer with 128-bit Secure Sockets Layer (SSL) technology to ensure that no one else can read it. Application layer security - SkyDox stores all files in a proprietary, binary-fragmented format rather than the original format. This means that files are unintelligible except to users and guests who have gained authenticated access through the SkyDox platform.

Data Center Security and Availability

SkyDox cloud infrastructure is hosted by a range of fully accredited data center partners across Europe, Asia, and North America. SkyDox data center partners are ASHRAY, ISO 27001 Information Security Management System (ISMS), and/or SAS70 Type II audited/certified. North American partners are also Federal Information Processing Standard (FIPS) and healthcare-applications compliant with HIPPAs Security and Privacy Rules. Power - SkyDox partners provide power with a minimum N+1 power infrastructure configuration. This critical infrastructure offers the flexibility to scale as required without losing overall efficiency or disrupting the infrastructures availability. Security SkyDoxs partners data center buildings are protected with multiple layers of physical security: a perimeter fence, a security gate and entrance, an alarm system, mantraps, biometric access systems into SkyDoxs footprint, CCTV, trained security staff on site 24x7, and an external security firm to patrol the area both inside and outside. No one enters or leaves without proof of identity, and all visitors are checked against defined access lists.

www.skydox.com

2012 SkyDox Ltd. All rights reserved. Version 01

Security & Architecture | Factsheet

Overview (continued)
Controlled environment - For optimum performance, all equipment is maintained and continuously monitored in a climate-controlled environment (chiller, CRAC, fire panels, generator, UPS, etc.). Multiple CRAC units provide redundant capacity (N+1). Fire-retardant walls, early-warning laser smoke detectors (VESDA), direct lines to fire stations, and automatic, gas-based fire suppression systems provide protection against fire. All the facilities infrastructures are monitored 24x7. Network infrastructure security - The core network infrastructure segregates traffic to prevent eavesdropping. SkyDox network gateways are hardened against spoofing attacks and employ packet filtering and policy routing. Unused switching device ports are disabled. SkyDox maintains independent, source-controlled package repositories and employs upstream package staging to secure binary packages, fast-track security, and bug fixes. Data access controls - SkyDox partners employ a variety of mechanisms and security checks to control data access. All SkyDox employees undergo criminal background, credit, and social security checks, as well as employment verification. Access to the network infrastructure is limited to facility managers and network engineers. Support staff use individually generated public/private key authentication, which is more secure than traditional passwords.

Contact Us
Headquarters: SkyDox Ltd Second Floor 19-21 Hatton Garden, London EC1N 8BA Email: info@skydox.com Call from Europe: +44 20 3393 6834 Call from North America: +1 866 596 4794

Collaboration Benefits
Faster document revision/ reconciliation cycles Improved ability to quickly incorporate feedback Improved control of document dissemination Improved visibility of activity at both file and user levels Improved version control Improved client and prospect interactions Improved efficiency for meetings Improved efficiency within the messaging environment Improved search capabilities Improved quality and creative output Improved response time to customer or partner requests

At a Glance
SkyDox is an enterprise-class, cloud-enabled, secure file sharing and collaboration platform. SkyDox makes it easy to view, comment, search, store, deliver, manage, and collaborate on over 200 types of files using a suite of highly secure, online, mobile, and desktop-based collaboration, storage, and content management tools. The company is simplifying the collaborative process for organizations wishing to share and collaborate on confidential documents and files with business partners, customers, suppliers, and/or contractors or among its distributed or mobile workforce. The SkyDox platform is scalable, highly secure, and architected to meet enterprise security and availability requirements. It offers flexible configuration options for deployment within a private managed cloud, as a hybrid onsite system, or within SkyDoxs highly secure public cloud to meet data security policies and compliance requirements of any organization.

ICT Benefits
Reduced software costs Reduced infrastructure costs Reduced operations and administration costs Reduction in use of unauditable tools Improved compliance Improved ROI on knowledge management and ECM investments Improved alignment with user requirements

Customers
SkyDox works with organizations of all types and sizes, particularly those that have a high degree of file sharing and collaboration among distributed stakeholders and crossfunctional teams. Sectors include: Business management/consulting Legal services Financial services Creative industries, such as advertising, marketing services, and public relations Healthcare Government Non-profit

www.skydox.com

2012 SkyDox Ltd. All rights reserved. Version 01