Data & Server Hosting

QuickTapSurvey uses the Amazon Web Services (AWS) cloud-computing platform to host its data and servers. The QuickTapSurvey server instances are located across multiple data centers for disaster recovery and fault tolerance. The following sections are provided directly from the Amazon Web Services: Overview of Security Processes whitepaper:

Amazon Web Services (AWS) delivers a scalable cloud computing platform with high availability and dependability, offering the flexibility to enable customers to build a wide range of applications. Helping to protect the confidentiality, integrity, and availability of our customers’ systems and data is of the utmost importance to AWS, as is maintaining customer trust and confidence.

AWS Compliance Program 

The AWS Compliance Program enables customers to understand the robust security in place and then helps them streamline their compliance with industry and government requirements for security and data protection. The IT infrastructure that AWS provides to its customers is designed and managed in alignment with best security practices and  

a variety of IT security standards, including:

• SOC 1/SSAE 16/ISAE 3402 (formerly SAS 70 Type II) 
• SOC 2 
• SOC 3 
• FISMA, DIACAP, and FedRAMP 
• PCI DSS Level 1 
• ISO 27001 
• ITAR 
• FIPS 140-2

AWS provides a wide range of information regarding its IT control environment to customers through white papers, reports, certifications, accreditations, and other third-party attestations. More information is available in the Risk and Compliance whitepaper available on the website: http://aws.amazon.com/security.

Physical and Environmental Security

AWS’s data centers are state of the art, utilizing innovative architectural and engineering approaches. Amazon has many years of experience in designing, constructing, and operating large-scale data centers. This experience has been applied to the AWS platform and infrastructure. AWS data centers are housed in nondescript facilities. Physical access is strictly controlled both at the perimeter and at building ingress points by professional security staff utilizing video surveillance, intrusion detection systems, and other electronic means. Authorized staff must pass two-factor authentication a minimum of two times to access data center floors. All visitors and contractors are required to present identification and are signed in and continually escorted by authorized staff.  

AWS only provides data center access and information to employees and contractors who have a legitimate business need for such privileges. When an employee no longer has a business need for these privileges, his or her access is immediately revoked, even if they continue to be an employee of Amazon or Amazon Web Services.