A week ago we looked into the reasons that make a cloud service provider trustworthy (http://datainherit.wordpress.com/2009/11/23/when-can-you-trust-saas-or-a-cloud-service-provider/). Now we are going to take a look at the steps that your service provider should take in their quest to become a trustworthy service provider. We have been through them all in our development of DataInherit and have outlined below what we believe are the minimum requirements you should expect from your service provider.
Service availability and performance:
Firstly, you need a service provider that does not outsource their operations as the third party may have different priorities when it comes to the security your data. Then, it is important to ensure that the data-centres where your information is being stored are security certified. Hopefully your service provider will be boasting about this on their homepage so the information should be easy to verify. In our case, our servers conform to the exacting standards of the Swiss banking commission. All the servers and services that you use to access DataInherit are redundant and designed for the highest availability for our customers. This is an important element if you want to be able to access your data anywhere in the world and at any time. Also, our servers are setup in a high-performance and high-scalability cluster with state of the art load-balancing. Availability monitoring should come from different angles of the world and should be implemented with internal means as well as by a leading third-party service monitoring company. This should be a minimum requirement for your service providers.
Privacy:
It’s true that not all service providers will be able to boast a long standing tradition of privacy and security. Obviously, we achieve that automatically with a service designed and developed under some of the strictest privacy protection laws in the world. Although this gives our customers an increased level of security it is imperative that you check carefully your service provider’s privacy policy before signing up. This document should be easily accessible from the website. For an example of what you should expect in terms of privacy, you can view our privacy policy here: http://www.datainherit.com/en/privacy.html.
Access and Confidentiality:
Can my service provider access my data? This is a question that people don’t always consider when choosing a service provider as it is perhaps assumed that they can’t. However, if your provider can reset your password on demand then there is a potential risk that this will enable them to also access your account. To ensure maximum security for your data, and to remain 100% anonymous, your service provider should not be able to assist you in gaining access to your account. Unfortunately, this puts a greater onus on customers to safeguard their login information but it is the only guaranteed way to ensure the highest level of security for stored data.
Customer Service:
Lastly, you need to ensure that your provider has a good customer service and can be contacted with any queries or problems you may have 24 hours a day, 7 days a week. This is the backbone of any company that takes their role as a service provider and the needs of their customers seriously. At DataInherit our policy is to answer our customers queries within one hour. Our advice would also be to trial any service you are considering using to test these levels of usability and service before choosing the right service for you.
Tobias Christen CTO, DataInherit
P.S. For a full definition of trustworthiness in Computer you may find this exert from Wikipedia of interest: http://en.wikipedia.org/wiki/Trustworthy_Computing
To find out more visit: www.datainherit.com or start a free trial at: https://www.datainherit.com/apps/trial.html#