Security

<< Back

Security
Strictly monitored access to all data centers using keycard protocols, biometric scanning protocols and continuous interior and exterior surveillance. Access is limited to data center personnel only without exception and all data center employees undergo thorough background security checks before being employed.

Precision Environment
All data centers' HVAC (Heating Ventilation Air Conditioning) systems are N+1 redundant, ensuring that a duplicate system can immediately come online in the event of an HVAC system failure. All air is circulated and filtered every 90 seconds to remove dust and contaminates. An advanced fire suppression system designed to stop fires from spreading in the unlikely event one should occur. All cables are securely tied down with cable racks suspended from ceilings providing dual routes for all cables.

Conditioned Power
In the unlikely event of a total utility power outage, all data centers' power systems are designed to run uninterrupted with all servers being fed conditioned UPS (Uninterruptible Power Supply) power. The UPS power subsystem is N+1 redundant, with instantaneous failover if primary UPS fails. For extended utility power outages, routinely tested, on-site diesel generators can run indefinitely.

Core Routing Equipment
All data centers use only fully redundant, enterprise-class routing equipment. All routing equipment is housed in a secured core routing room fed by its own redundant power supply. Fiber carriers enter facilities as disparate access points to guard against service failure.

Perimeter Defense
The network perimeter is protected by multiple firewalls and monitored by intrusion detection systems. In addition, the host administrators monitor and analyze firewall logs to proactively identify security threats.

Data Encryption
LegalShore leverages on a 128-bit SSL Certification. The lock icon in the browser indicates that data is fully shielded from access while in transit.

User Authentication
Users access LegalShore only with a valid username and password combination, which is encrypted via SSL while in transmission.

Application Security
Our robust application security model prevents one LegalShore customer from accessing another's data. This security model is reapplied with every request and enforced for the entire duration of a user session.

Operating System Security
Host Administrators enforce tight operating system-level security by using a minimal number of access points to all production servers. We protect all operating system accounts with strong passwords, and production servers do not share a master password database. All operating systems are maintained at each vendor's recommended patch levels for security and are hardened by disabling and/or removing any unnecessary users, protocols, and processes.

Database Security
Whenever possible, database access is controlled at the operating system and database connection level for additional security. Access to production databases is restricted to a limited number of points, and production databases do not share a master password database.

Server Management Security
All data entered into the LegalShore application by a customer is owned by that customer. LegalShore employees do not have direct access to the production equipment. LegalShore utilizes managed service providers who oversee all system management, maintenance, monitoring, and backups.

Reliability and Backup
All networking components, SSL accelerators, load balancers, Web servers, and application servers are configured in a redundant configuration. All customer data is stored on carrier-class disk storage using RAID disks.