< Back
You are here:
Print

Our entire infrastructure is hosted with Amazon AWS and covered under the AWS System and
Organization Controls (SOC) and HIPAA auditing. Per our agreement with AWS, we cannot
share the specific certificates and audit reports. Here is the public information about
those reports and instructions on how to obtain copies if they would like:
https://aws.amazon.com/compliance/programs/
https://aws.amazon.com/compliance/faq/
o Per #4 under Compliance Reports – “AWS is happy to provide your customer
with a copy of our SOC 1 or SOC 2 report; however, we require that the intended
user of the report have a Nondisclosure Agreement (NDA) in place with AWS
directly. To best support your customers, we recommend they utilize
the Getting Started with AWS Artifact guide to download the requested
compliance report(s).”
https://aws.amazon.com/compliance/soc-faqs/
o SOC 1 (formerly SSAE 16/ISAE 3402 and replaces SAS 70) and SOC 2 – may be
obtained with an NDA directly with AWS
o SOC 3 Report – https://d1.awsstatic.com/whitepapers/compliance/soc3_amazon_web_services.pdf
https://aws.amazon.com/compliance/hipaa-compliance/
Additionally, we do host some government and higher education customers who choose to, or
are required to, in the AWS GovCloud (https://aws.amazon.com/govcloud-us/faqs/)
environment that addresses specific regulatory and compliance requirements of US
government agencies at the federal, state, and local level.
Because we’re hosted entirely in the AWS infrastructure, our environments are compliant with
SSAE16, SSAE18, SAS70, HIPAA, PCI DSS Leve 1, etc. The full list can be found here
https://aws.amazon.com/compliance/programs/.

You can find more basic security information here for Amazon Web Services, Inc., a premier cloud computing company, that ensures:

-Routine auditing of physical access to data centers by AWS employees
-Automatic fire detection and suppression
-Conditioned Power, with UPS (Uninterruptible Power Supply) for all servers
-N+1 redundant UPS power subsystem with instantaneous failover if the primary UPS fails

We also keep a rolling backup for two weeks of all data which is backed up each night.

See anything missing or out of date on this page? Please contact Simplicity Support at helpdesk@simplicitycollect.com.