We are pleased to announce the grand opening of the newest DPoD data center in Sunnyvale, California.  This location joins the other DPoD trusted data centers, strategically positioned throughout Europe and North America to maintain proximity with customer data. As with all DPoD data centers, Sunnyvale will be certified to the highest industry security and privacy standards for which Thales is renowned. The new data center will improve service availability and increase the overall service capacity. We are excited to open this new data center as we continue to onboard more and more customers, requiring additional resources.

Certifications

Thales ensures its data centers’ internal operations are certified to the highest standards for data security, privacy controls, and operational reliability put in place by industry standards organizations.

DPoD physical data centers in North America are subject to an Independent Service Auditor’s Report (SOC2) on Controls Relevant to Security and Availability. The Sunnyvale data center will be included in the next audit, conducted in the fall. This is a Type 2 Report—a report on management’s description of the service organization’s system and the suitability of the design and operating effectiveness of the controls. DPoD data centers in Europe and North America have been awarded ISO 20771 certification. DPoD operations, and operations-related IT is fully compliant with the ISO 27001:2013 standard, having achieved independent certification to ISO27001 for its Information Security Management System and processes.

Certifications such as ISO 27001 and SOC2 are awarded retrospectively based on the successful assessment of the operation of a service over the preceding 12 months. As a result, the Sunnyvale data center will receive these certifications in the next audit cycle this fall.

Data Center Physical Security

Physical security underpins any cloud-based service, so all data centers have 24-hour manned security, including foot patrols and perimeter inspections with access controls complying with industry best practices. This may vary based on the data center but can include proximity, biometrics, key, PIN, or a combination of any of those controls listed. The data centers are fully equipped with video surveillance throughout each facility, and perimeter cameras track any asset removal, ensuring that equipment and the security of data held within that equipment are assured. The data centers also utilize state-of-the-art technologies, ensuring redundancies in connectivity, power, safety, and security.

The following is a list of physical security features of the DPoD Service:

• Video surveillance cameras are located throughout each facility
• 24×7 manned protection—no unsecured access to the data center
• Multi-factor authentication is engaged at all times for entrance to the data center

Read our Platform Architecture and Security White Paper to learn more about the measures Thales has taken to ensure the security, robustness, and availability of the Thales DPoD Service.