BoardVantage Security

BoardVantage has implemented numerous measures to ensure the confidentiality and security of your materials. Our solution is hosted in a highly secure environment, protected by encryption and authentication in a hardened, protected site. Like major financial institutions, we maintain a strong perimeter defense using multiple layers of security and constant monitoring. Also, we devote significant resources to continuously improving our security with the latest technologies.

That said, we know good technology is only half the battle. No system is effective without tightly controlled process. That's why BoardVantage processes are independently audited, and the company has achieved SAS70 Type II and SysTrust certifications.

Between our security management program and our secured state-of-the-art hosting facilities, our customers receive the highest data protection commercially available.

Physical security.

All computer and network communication systems are housed in a secured, hardened hosting facility with 24x7x365 guard patrols and full surveillance and biometric access control systems.

System redundancy.

Maintained by our own security-screened staff, the BoardVantage system has built-in redundancy at every point, including Web, application, file, database, and storage servers.

Network monitoring.

Our entire infrastructure is continuously protected by a broad shield of network equipment and software tools and continuously monitored by our staff for any attempted network attacks.

Data security.

We encrypt all data using strong ciphers, both during network transport and while resident on computing platforms, so that it cannot be compromised. Each company's content is separated into an individual repository and encrypted with a unique key. This way only authorized users can access protected data—barring even BoardVantage system administrators.

Network security.

BoardVantage requires customers to use Secure Socket Layer (SSL) encryption technology (128-bit minimum) when accessing the BoardVantage application with an Internet browser. Digital certificates ensure the authenticity of each SSL session. This helps minimize the risk of datastream interception between the user's browser and the BoardVantage service.

Virus protection.

Our vigorous virus control methods prevent the distribution of malicious code that could disrupt service, destroy data, and undermine productivity.

Data backup.

We automatically back up all customer data nightly and store it at a secured, off-site facility. All backups are encrypted, and any unused, obsolete, or end-of-life media is destroyed to prevent third-party data retrieval.

User authentication.

Our authentication policies enforce security without increasing complexity for authorized end users. In addition to our unique two-tier authentication mechanism, we partner with you to ensure the controls and access policies your organization needs are enforced at all times.

Operating system security.

BoardVantage application servers are hardened at the operating system level. Administrative access is restricted to authorized personnel: login is possible only through encrypted access with individually authorized and enabled encryption keys. We also regularly review security patches according to vendor specifications.

Internal processes.

BoardVantage is SAS70 Type II and SysTrust certified. Our documented internal processes have been independently audited to ensure that we have the proper controls in place for provisioning, change control, and procedural changes. We not only enforce the separation of roles and responsibilities and closely supervise employees, we also conduct criminal background checks on each staff member at both the federal and local levels.