Certification and Compliance

Highly Regulated Industries

Our Primary focus is on meeting the needs of businesses operating in highly-regulated industries. We serve health care providers, financial institutions, legal firms, and other industries that are legally required to comply with specific regulations regarding their operation of business. These industries value the storage and retention of critical data in addition to security and data management practices.

As a business trusted to service the IT needs of these industries we follow the same strict policies of secure storage and data retention.

The Value in Certification

A breach of privacy or security could lead to costly and time-consuming replacement of or search for the critical information. Failure to comply with regulations stipulates costly fees. Most importantly, a breach could result in the loss of reputation and goodwill, a priceless asset that is often impossible to replace, and could ultimately lead to the loss of your business. Ensure that you thoroughly research your service provider and their certification.

Trustworthy Systems & Operations

Regulatory compliance, internal audits, and certification are extremely important factors to evaluate when choosing a hosted service provider. Because you place your most critical applications and data in the charge of a third-party service provider, you must be able to trust their systems and operations.

Our operations and systems are audited and certified to ensure an environment that can be trusted.

100% Hosted in Canada

All of NIRIX’s cloud services and our customer’s application and data are hosted strictly in Canada. This ensures electronic data and applications stored in NIRIX’s datacenter are not subject to foreign privacy policies and regulations.

We Maintain the 3 Leading Certifications and Compliances

There are three types of industry leading certification and compliance for advanced cloud service providers. We’ve built our datacenter and our operations to ensure that we meet the criteria necessary to protect the data we host.

SSAE 16, ISAE 3402 & CSAE 3416 Compliance & Certification

SSAE 16, ISAE 3402 and CSAE 3416 define the professional standards, including requirements regarding compliance, security and access, backup and recovery, computer operations and facility infrastructure for service providers that manage customer data. This is a standard set and overseen by the American Institute of Certified Public Accountants and the International Federation of Accountants.

This certification signifies that a business has prepared the controls and related documents to prove its compliance with SSAE 16, ISAE 3402 and CSAE 3416. After one year, the practices are audited to determine that the controls and system are time-tested compliant and then certification is awarded.

NIRIX’s Datacenter holds SSAE 16, ISAE 3402 and CSAE 3416 certification. Holding this certification means that our Datacenter is fully capable of handling your business-critical data and systems with the greatest care and security, and has taken measure to greatly reduce the possibility of service disruption or potential security threats. Peace-of-mind comes with securing your services through NIRIX.

PCI DSS Compliance & Certification

Payment Card Industry (PCI) Compliance requires the observance of PCI Data Security Standard (DSS) policies and procedures concerning credit card account data security. All organizations that accept, store, process or transmit credit card details must follow these standards. This multidimensional security standard includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures to ensure a controlled and secure environment for processing the sensitive information.

NIRIX’s Datacenter holds full PCI DSS Certification. This means that NIRIX customers have a secure platform, that follow third party best practises for credit card processes, to build and run their applications on.

When choosing which cloud/hosting provider to outsource your IT services to, remember: a cheaper price does not always indicate the best deal. Ensuring due diligence in selecting a service provider with regulatory compliance is of the utmost importance and rests in your capable hands. Don’t let your critical systems and data be compromised by a service provider that cannot deliver the security specifications your business legally requires! NIRIX provides a comprehensive suite of hosted services in our world-class datacenter, allowing your business to achieve the required regulatory compliance, and providing a solid base for your trust.

OIPC Compliance

The Office of the Information and Privacy Commissioner of Alberta (OIPC) works to protect the privacy and rights of those in Alberta. While its jurisdiction is Alberta based, its criteria for data privacy is founded on reliable data protection principles.

OICP is involved with the province’s handling of the Freedom of Information and Protection of Privacy (FOIP) Act, the Health Information Act (HIA) and the Personal Information Protection Act (PIPA). They monitor the acceptable use of data and safeguard the right to privacy.

All NIRIX cloud services have been submitted and accepted by the OIPC. This means they meet the high requirements for data protection.