Compliance
All of our products are built on our casWS cloud storage platform which has several built in compliance features to help you meet your compliance needs. These features include an integrated retention policy management engine and extensive reporting capabilities to ensure you know who is accessing your data.
Regulatory compliance has become a critical element in IT decisions in the same way that business intelligence software, ERP, service-oriented architecture (SOA), cloud computing and other major technological innovations have in recent years. The cost of compliance initially will grow with each new regulation, especially if the IT organization institutes a separate set of controls for each.
Casdex understands that most businesses have quality, security and reliability needs that go beyond the dictates of any compliance regime or set of standard control objectives. With casWS, Casdex's compliant cloud storage and archiving service, Casdex addresses these key components of storage and archiving and compliance archiving on one platform.
With casWS, organizations can tag data as having special compliance requirements without the need of costly migration, or siloing of data to a compliant storage appliance. Our compliance controls are enabled at the core, so all data can be left in place with the appropriate retention policies or legal holds applied to the source data.
All of this is delivered on a highly scalable, robust, fault tolerant storage system. With casWS as a single instance CAS store, data duplication can be eliminated, compliance can be achieved cost-effectively, and total data storage costs can be reduced.
For a partial list of our compliance features:
Compliance Features |
Regulation |
Description |
Authentication of Documents' integrity |
SEC, HIPAA, SOX |
Hashes are used to prove whether a document has been altered |
Retention Policy |
SEC, HIPAA, SOX |
File level, folder level, or account level retention policies can be created |
Audit trail: File Access |
HIPAA |
All file activity is logged, and can be reported on |
Audit trail: File number |
SEC |
All files are given serial numbers to enable users to determine if a file has been deleted |
File Encryption (optional) |
HIPAA |
Requires that data be kept encrypted for privacy |
Strict retention: Files deleted after retention period ends |
HIPAA |
All copies of file are destroyed when retention expires regardless of location (online or backups) |
Offline synchronization |
SOX |
Files designated for archive will be immediately uploaded upon reconnecting to the network |
Automatic verification of data |
SEC |
Verification of the data proving the data's integrity |
Replication |
SEC |
Replicates files to remote site |