Security and Compliance

Security and Compliance


Last modified: May 25th, 2024
 

About Hot Aisle security

Customer data privacy is built into the foundation of Hot Aisle’s platform. From the physical data center through the software layer, customer data is tracked, access controlled, and protected using industry best practices.

Below is an outline of our general security and privacy standards.

Multiple-layer physical security at data centers
All of Hot Aisle's data centers are limited-access buildings, with no visible signage. All data centers are protected by security personnel, 24 hours a day, 7 days a week, 365 days a year.
In order to enter data center sites, all visitors must be pre-approved by both Hot Aisle and the data center and provide identification. Additionally, all guests and vendors must be accompanied by a staff member during their visit.
All employees are required to sign non-disclosure agreements (NDAs).

Access monitoring and data safeguarding

All paper documents at any data center location are shredded on-site. All infrastructure hardware is contained within locked and secured buildings, with cameras positioned at each cage, aisle, and door access point. Access tracking is performed in real time, which includes an ongoing digital door access log.

Logical access controls

Hot Aisle ensures a comprehensive logical separation of all its customers in storage, network and execution layers. All Hot Aisle employees are under NDA, and can only access customer data as needed for critical operations.
Logging and access control is applied to all infrastructure. Hot Aisle employs a comprehensive response plan for security events, and firewalls restrict inbound Internet connections.

Breach prevention

Hot Aisle employs several physical and logical intrusion prevention strategies as per industry best practice. Distributed Denial of Service (DDoS) mitigations are in place, as is TLS encryption of all Internet traffic.