Regulatory Compliance

The Health Insurance Portability and Accountability Act (HIPAA) was enacted by the U.S. Congress in August 1996 and signed by the then President Bill Clinton. Its two leading sponsors were Kassebaum and Kennedy. As far as Privacy Rule is concerned, its effective compliance date was April 14, 2003. This rule regulates the disclosure of Protected Health Information (PHI) held by such entities as health care providers, health care clearinghouses, health insurance companies, employer sponsored health plans, and medical service providers that participate in specific transactions. PHI is any information held by a covered entity which concerns health status, provision of health care, or payment for health care that can be linked to an individual.

HIPAA requires the above entities to take reasonable steps to limit the use or disclosure of protected health care information to the minimum that is necessary to accomplish the purpose of HIPAA. This includes establishing and maintaining appropriate and reasonable technical, physical and administrative safeguards to ensure that information is integral, available and confidential. Organizations involved in health care are required to assess their privacy and security requirements and determine proper protection measures on their own. SqlBak is a company that is able to ensure the protection of critical health care data without compromising patient privacy and by doing so its customers will get complete compliance with the requirements of HIPAA. less...

The Sarbanes-Oxley Act (SOX) was enacted in July 2002 and is also known as "Public Company Accounting Reform and Investor Protection Act" and "Corporate and Auditing Accountability and Responsibility Act".

The main purpose of Sarbanes-Oxley Act of 2002 is to establish verifiable security controls that will protect against confidential data disclosure, and track employees to avoid accounting errors and fraudulent financial activities. These requirements first of all concern financial reports and, therefore, their keeping becomes very important as they must be kept completely secure.

Being an online data storage facility SqlBak does not see the contents of your data, its primary purpose is to ensure availability and protection of information that is being stored in compliance with all applicable requirements and quality standards. At the same time the client is responsible for what kind of materials they store and who has access to it.

Clients of SqlBak can achieve SOX compliance in the following areas:

• your data is transferred and stored using 256-bit AES encryption. Moreover, your data is encrypted and decrypted based on the password defined by user. This means that no third party can decrypt your data except your designated representatives;
• access to your data is based on encryption password that is only available to you and you decide who shall access to your files;
• fast and secure backups that are immediately available;
• you can keep your data for as long as you want, there is no time restriction;
• whenever a document is accessed by user SqlBak logs date and time stamp, so that you can track who accessed your files and date and time of such access. less...

The Gramm-Leach Bliley Act (GLBA), also known as the Financial Services Modernization Act of 1999, was enacted in November 1999.

GLBA covers many financial institutions such as banks, credit unions, brokerages, thrifts, insurance firms, in other words companies that offer financial products or services to individuals. Such financial activities include loans, mortgages, financial or investment advice, insurance, tax planning, etc.

GLBA forces financial institutions to assess how they manage private data and to do risk analysis of their current processes. Also GLBA applies privacy control requirements on a wide range of private personal information as well as personally identifiable financial information.

SqlBak always makes sure that your data is backed up, stored, encrypted and is immediately available. For that we employ a number of state-of-the-art methods, equipment and technology. The health of backups is regularly checked to make sure that your information is safe. Moreover, you can always get a detailed report to show regulators a clear picture of the chain of custody of the information you store with us.

Your data will be encrypted before transmission and will always remain encrypted. In addition, access to your data is restricted by password authentication and is date and time-stamped by users.

SqlBak has no access to the contents of your data, so it is up to you to maintain the data in a manner that is compliant with GLBA. We will store your data for as long as you want us to keep it for you. less...