Security Policy
ADI Time considers all client data to be confidential and we maintain technological, physical and procedural safeguards to protect your confidential against unauthorized access.
Technology
We utilize industry-leading SSL technology when transmitting data to our servers. This technology encrypts the information you provide so it's virtually impossible for a 3rd-party to view the information. The ADI Time product (version 10.3 and higher) includes customizable password security policies allowing you to enforce standards for password length, case change, letter/number combinations and expiration. The product also locks out accounts after several failed login attempts to protect against potential unauthorized access.
Support data is transmitted to ADI Time using our SFTP server (FTP over SSH). The data is automatically encrypted during transmission and is scrubbed of personal information prior to being made available to our support and development staffs.
Physical
All electronic information is stored in our SAS-70 Type II certified data center. Access is restricted to employees required to develop, support and maintain our systems. All paper records are kept in locked storage cabinets accessible only to those employees who require access to maintain your account.
Procedures
Background checks are performed hen hiring any new employees. All employees are held to a written / signed code of conduct. Procedures are continually reviewed and updated.
Security Response
Our systems monitor for intrusions 24x7 and alert our staff of any anomalies. In the unlikely event of a security breach, ADI Time personnel will initiative our disaster recovery plan. This involves immediately isolating and patching the source of the breach, determining all systems affected, or potentially affected, and building a corrective action plan. ADI Time will notify customers who may be affected within 48 hours of the breach with the scope of the breach and corrective action plan.
