Virtual Data Room Security

Ansarada offers you a level of security and confidence that is unmatched by any other virtual data room service.

That's because Ansarada is certified as compliant with the globally recognised Information Security Management System (ISMS) standard ISO 27001. Our accreditation is comprehensive, encompassing physical hosting environment, system access, user access, development of code, storage, business continuity and dozens of other processes.

View our ISO 27001 certificate for the operation of a secure virtual data room service and the full 'Scope of Applicability'

Ansarada also operates from within an ISO 27001 certified data centre, with equipment wholly owned and controlled by us. This approach to security delivers you the assurance of operating with the world's only virtual data room specialist that guarantees independently certified end-to-end security meeting best practice standards. No gaps. No Risks.

Ansarada takes a thorough and measured approach to security and reliability at all levels. We have outlined below an overview of the way in which sensitive and confidential information is protected and 24/7 accessibility is maintained and assured. Through a combination of security measures at the document, infrastructure, organisational and application levels, Ansarada protects all your sensitive and confidential information.

	“We looked at Ansarada's security features and liked its simple to use, multi-layered approach. Ansarada had the security we needed for this particular property deal, and the capability to scale up and down as needed for future transactions.” Peter Campbell - CIO, Sparke Helmore

Independently certified end-to-end best practice infrastructure security

Ansarada's infrastructure is located at highly secure data centres offering ISO 27001 certification, including:

• 99.9% uptime guarantee (minimum N+1 redundancy)
• Full electronic access controls, including mantraps and biometric access controls
• On-site 24/7 control centre, engineers, security guards + CCTV monitoring
• Uninterrupted power supply with dual diesel generator backup for extended power outages
• Redundant core network and routing equipment
• Redundant climate control cooling systems
• VESDA and gaseous based fire protection systems

Document protection: sophisticated server based rights management

Leveraging Adobe's LiveCycle Rights Management Server, we have developed sophisticated functionality to ensure sensitive documents stay in our datarooms and cannot be saved and viewed from local machines, including the web browser cache. Ansarada's security features include:

• Dynamic authorisation allowing only select individuals access to documents. Access and usage rights can be modified or revoked at any time
• No plug-ins or applets are required
• No clunky viewer platforms required
• Print and print screen disabling
• Preventing downloading and saving. Documents are protected at the server level and may not be opened from anywhere other than the dataroom if required
• Dynamic watermarking of documents. Tag documents with identifiers to display the time/date, IP address and user who accessed the document
• Compliance with regulations governing information security and data protection, through system-based preventative controls
• A simplified modern method for encrypting data room documents - no plug-ins or clunky viewer systems
• Version control capabilities outside the dataroom. You can allow users to save documents but then expire access to those documents remotely at any time

Secure data room application architecture

• Access control through two tiered password protection with lockout feature
• Customisable session timeout and IP blocking features
• Customisable allow/disallow simultaneous logins with the same user name
• Tamper-proof audit trails recording all data room actions and events
• No installation of browser plug-ins, ActiveX controls or OCX modules which could be compromised by attackers
• Forced 128 bit TLS (Transport Layer Security) encryption on data transfers. TLS is a successor and advancement of an older but more commonly known SSL (Secure Sockets Layer) protocol