Partager

Governance and Compliance

Leading enterprises and government agencies rely on Accellion to ensure maximum data security, control, and compliance for internal and external content collaboration.

kiteworks by Accellion is an enterprise class, private cloud secure content collaboration platform. kiteworks’ strong security controls and the industry’s broadest deployment options enable organizations to ensure the protection of sensitive information and intellectual property. With a modular multi-tier architecture, kiteworks also provides organizations with a highly scalable and flexible solution.

Déploiements en cloud privé

  • Private Cloud (On-Premises) Private cloud on-premises deployments provide complete ownership of the encryption keys to ensure full control over the availability, integrity, and confidentiality of content sharing between internal and external users. Accellion offers an easy to install and manage on-premises solution for VMware and Hyper-V virtualized environments, enabling rapid enterprise-wide private cloud deployment.
  • Private Cloud (IaaS) Similar to the on-premises offering, but deployed on your Microsoft Azure or Amazon Web Services resources.
  • Private Cloud (Accellion-Hosted) Private cloud hosted deployment provides the flexibility and scalability of a managed service offering while ensuring high levels of security and control. Avec une solution de cloud privé hébergé d'Accellion, il n'y a aucun risque de mélange des données d'application, ce qui réduit considérablement le risque de divulgation et de fuite des données.
  • Hybrid Cloud Enterprises with global deployments can seamlessly combine on-premises deployments for major offices with IaaS or hosted deployments for satellite offices to enable rapid scaling of their own IT infrastructure. Another alternative is to deploy most of your resources in IaaS or Accellion Hosting, while deploying the Enterprise Content Management (ECM) connectors on VMware or Hyper-V on the same on-premises network as the ECM systems. Accellion's hybrid cloud solution combines the control of the private cloud with the flexibility of hosted cloud solutions, and a wide variety of deployment architecture options.

Gouvernance

  • Les administrateurs de découverte électronique peuvent se conformer aux demandes juridiques afin de préserver et de collecter tous les fichiers et métadonnées pertinents, et définir des politiques de rétention des contenus pour répondre aux exigences en matière de conformité réglementaire.
  • Data Loss Prevention kiteworks solutions integrate with data loss prevention (DLP) solutions via the ICAP protocol and supports leading DLP solutions, such as Symantec, WebSense, and RSA. All shared content can be monitored for sensitive content and quarantined or blocked in conformance with enterprise content policies.
  • User-Friendly DRM Files can be protected with additional controls, such as view-only roles, watermarking, and file withdrawal capabilities.

Sécurité des données et conformité 

  • Chiffrement Tous les fichiers sont chiffrés, qu'ils soient statiques ou en transit, aux niveaux de chiffrement les plus forts. With kiteworks, organizations retain full ownership of the encryption keys and enterprises can ensure no unauthorized parties have access to their data.
  • Modular Multi-Tiered architecture Highly flexible architecture allows the web application and storage tiers to be separately deployed in the network for additional layers of protection.
  • Data Sovereignty Geographic policies can be enforced to restrict user content to storage physically located in specific countries to meet data residency requirements.
  • Full Auditing Every user action in the system is logged and audit reports can be easily created to provide full visibility and demonstration of compliance.
  • Secure Containers  All content stored in kiteworks mobile applications is protected with encryption and controls, such as remote wipe, whitelisting, watermarking and offline PIN, as well as an integrated Microsoft Office editor. Microsoft Office files in “restricted” folders can be edited in mobile applications or the web browser, but cannot be copied, downloaded to the desktop or opened in other applications.
  • FIPS 140-2 Validated kiteworks has received FIPS 140-2 Level 1 validation.
  • Compliance The kiteworks solution enables compliance with industry and government regulations, including SOX, HIPAA (with signed BAA), ITAR, SOC2, and PCI DSS Level 1. ISO27001, ANSSI, and CJIS. Accellion is an Authorized FedRAMP cloud service provider.
  • Accellion est fière de faire partie du programme de confiance au cloud de Skyhigh. En tant que fournisseur de services de cloud désigné comme Skyhigh Enterprise-Ready, nous satisfaisons pleinement les exigences les plus strictes en matière de protection des données, de vérification d'identité, de sécurité du service, de pratiques commerciales et de protection juridique.

FedRAMP Logo - Accellion is an Authorized FedRAMP cloud service provider Logo AICPA-SOC - Audit SOC 2 pour la Sécurité et la conformité des données Logo CSA - Membre collectif de la Cloud Security Alliance pour garantir un environnement informatique en cloud sécurisé
Logo FIPS 140-2 - Validation FIPS 140-2 Niveau 1 pour la sécurité et la conformité des données Logo HIPAA - HIPAA avec accord signé par les associés pour la sécurité et la conformité des données Logo PCI DSS - Certification Niveau 1 selon la norme de Sécurité des données du secteur des cartes de paiement pour la sécurité et la conformité des données