Infrastructure

  1. How is data securely stored, backed up and destroyed?
  2. Can we get a test version of our site?

Infrastructure

1. How is data securely stored, backed up and destroyed?

The hosting infrastructure stores it data on an Enterprise SAN. Your MECC Central database and files are backed up from this SAN each day, first to an online backup staging system, then to a tape facility. Both the online and offline systems are encrypted, and tapes are securely stored off-site.

Tapes are rotated to give us an ability to restore from multiple points in time. We currently perform weekly full backups and daily incremental backups. Each daily backup is retained for 1 week, each weekly backup is retained for 1 month, and monthly backups are retained for 1 year.  We restore to the last good backup.

Each MECC Central instance has its database and file storage, segregated from other instances so it is possible to selectively restore one instance without affecting other instances.

At the end of the life of each physical storage device, it is securely destroyed - currently by shredding. This applies to all physical data storage mediums, including disk drives and tapes. 

Due to the shared nature of the backup strategy, it is not possible to selectively destroy data on the backup mediums. This means that if you wish to delete specific information within MECC Central, then that data can be deleted in your live instance, but cannot be removed from our backup system until the tape is reused or destroyed in the normal course of business.

2. Can we get a test version of our site?

Yes, we can set up a time-limited sandbox for you to use for tests and simulations.  

A sandbox can be created completely blank, or with a copy of your current live site. Each sandbox lasts for up to 2 weeks, and data is destroyed is automatically after that time. A charge of $295 is charged for each sandbox created.

Alternatively you can easily set up an incident for training and testing, and then close or delete it afterward. This has the benefits of using the live system, and being able to be archived to assist with any audits you may have in future. It is also included at no additional charge.