Technical measures at data centers

Location of data centers

• Location: The data centers are located in the Netherlands (EU). A specific data center is used for customers in the APAC region. This data center is located in Singapore.

Security of the data center buildings

• Burglary prevention by 24x7x365 monitoring by means of security guards and camera monitoring; burglary detection and alarm; strict access control by means of digital registration, access cards, biometric access and server racks with certificate locks.

• Power supply by high-capacity and minimum n+1 redundant power supply; emergency power from independent generators and on-site fuel storage and 24x7x365 supply; entirely separate power distribution via A and B feed to rack infrastructure.

• Fire prevention by means of fully analogue addressable fire detection system in all spaces; smoke detection system; gas extinguishing system in technical spaces.

• Cooling by means of high-capacity cooling facility and cooling units, as a minimum N+1; control of temperature and air humidity by means of CRAC units.

• Certifications data centers: ISO 27001 and NEN 7510.

Network and infrastructure

• Cabling in server rooms is separated; separate bundles for power cable and for fibreglass cables or UTP network cabling.

• Network equipment spread over multiple data centers, redundancy is present in the field of routers, core switches, internal and external connections (multiple connections to transit suppliers and Internet Exchanges), geographically separate routes between multiple data centers. The whole network is based on dynamic routing so that traffic is rerouted in the event of outage of components.

Platform infrastructure 

• Redundant server and storage hardware through virtualization.

• Encryption of storage at disk level.

• Backup with snapshot technology, located in separate data center; frequency and retention defined in SLA.

• Fully separated cold standby disaster recovery facility in separate data center.

• Backup and disaster recovery facility run on separate hardware from production.

• Secure connections using HTTPS / TLS.

• Anti-DDoS infrastructure protects critical parts of the network and other infrastructure.

• Logical access based on password policy and/or VPN keys, access lists for access of IP addresses on information systems, firewalls, possibility of central logging of information systems and detection systems for certain unauthorized changes.

• Network segmentation through the use of VLANs.

• Standard firewall and antivirus on all servers.

Additional services

• Daily operating system security updates; additional updates in the event of serious security risks and leaks.

Organization hosting provider (Exonet)

• Duty of confidentiality of all employees, Code of Conduct obligation for all employees, no temporary staff.

• Security officer within the organization, security awareness training for all employees.