Caseware Cloud security architecture
Caseware takes the security of your data very seriously. Below, you can find information about the security structure for Cloud.
Where is my data stored?
Your data is stored on servers operated by AWS in one of the following locations:
- The United States
You can choose where your data is stored when you create your account. All of your data, including your backup data, is kept in the same location.
How is my data protected?
Caseware Cloud continually undergoes independent security audits to reinforce our commitment to data security, privacy, and compliance controls. Independent auditors examine our entire Information Security Management System (ISMS) to verify our service delivery, operations and management of the Caseware Cloud platform to ensure it conforms to industry standards. These certifications demonstrate Caseware Cloud's international commitment to security and quality.
Caseware Cloud is ISO 27001:2013 certified and its ISMS is in alignment with best practices.
This certification is independent of Amazon Web Services (AWS), which has its own ISO 27001 certification for its data centers, infrastructure and operations.
Caseware Cloud is SOC 2 Type 1 and SOC 2 Type 2 certified.
Caseware Cloud uses the same encryption strength as online banking. Encryption keys are generated and owned by Caseware Cloud Ltd. and never shared with other parties, including Amazon. The same level of encryption is applied to:
Data transferred to and from Caseware Cloud
Data at rest
For more information about security in Caseware Cloud, see Cloud Security Compliance.
Is my data backed up?
Yes. Your data is backed up daily, and each backup is maintained for 90 days.
If you have legal requirements that your data must be stored geographically in one region, that data will only be stored there.