Where does the Fastcare data reside and how is it protected?


Fastcare data resides on virtual servers in the Digital Ocean Server Farm in New York, New York. Digital Ocean provides a 99.99% uptime SLA around network, power and virtual server availability. The servers are Hex Core machines with dedicated ECC RAM and high-performance RAID SSD Hard Drives.


The servers are in a physically secure location with very limited access. Other than via the Web Interface, access to this data is by a secure, validated link. Fastcare performs regular backups, and the backups are stored in Atlanta, Ga for safety and redundancy.


Through the web interface via an HTTPS connection, data access is based strictly on professional roles as defined in the Fastcare application. Data is logically partitioned by facility. 


Virtual Server Security & Employee Access

Virtual server security and data integrity is of the utmost concern. As a result, none of the technical support staff have any access to the backend hypervisors where virtual servers reside nor direct access to the NAS/SAN storage systems where snapshots and backup images reside.


Physical Security of the Servers

We use only premier data center facilities for colocating our equipment including: Equinix, Telx, and Telecity. The site is staffed 24/7/365 with onsite security and to protect against unauthorized entry. The site has security cameras that monitor both the facility premises as well as each area of the datacenter internally. There are biometric readers for access as well as at least two factor authentications to gain access to the building. Each facility is unmarked so as not to draw any additional attention from the outside and adheres to strict local and federal government standards.


Communications

All communications are transmitted over SSL (HTTPS) for access to gentellfastcare.com, and we use SSH keys to access the site.


Snapshot and Backup Security

Snapshots and Backups (images) are stored weekly on an internal non-publicly visible network on NAS/SAN servers. The Disaster Recover Plan is reviewed and tested quarterly.