Seriously safe and sound

Physical and network security

Sage Intacct’s infrastructure runs out of world class data centers. They are monitored 24/7/365 and provide full data recovery within 24 hours in the event of major disaster. Data center features include:

• Multiple fiber trunks and mirrored RAID storage
• Standby servers and redundant network components
• Redundant uninterruptable power supplies and parallel redundant generators
   

Application security

With security features built in to the Sage Intacct application, you can prevent outside attacks and ensure that the right people get the right level of access to your Sage Intacct solution. Features include:

• Highly granular level of control over user access
• Option of requiring 2-step user verification every time a user signs on through an unrecognized device
• Enforced password changes and automatic session timeouts
• Option to set acceptable IP ranges from which users may log in
   

System security

Sage Intacct is designed to prevent unauthorized programs, systems, and users from gaining access or control of system processes, resources, and data.  Features developed to protect your business include:

• SSAE 18 SOC 1 Type II audited twice per year
• SOC 2 Type II audited
• PCI DSS Level 1 certified
  Sage Intacct is responsible for maintaining all applicable PCI DSS requirements to the extent Sage Intacct handles, has access to, or otherwise stores, processes, or transmits customer’s cardholder data or sensitive authentication data, or manages customer's cardholder data environment on behalf of a customer.
• Tightly restricted access to production data including biometric access controls
• Hardened networks and firewalls
• Real-time activity log tracking
• Automated security scanning and third party white hat penetration testing
• Virus resistance reinforced through software architecture
• Oracle database secured with advanced security
• Minimum 128-bit encryption for all data transmission

Data-level security

Sage Intacct is built on the highly reliable Oracle database infrastructure, helping to ensure you can access information at any time of day, every day of the year. Data-security measures include:

• Full daily backups to multiple locations
• Continuous backups of transaction data
• Secure streaming of transaction data to remote disaster recovery center