Encryption
All information sent between application’s server and user’s internet browser are being encrypted with 256-bit encryption algorithm. This ensures that the information that is being transferred between the user and server will not be used unauthorized.
User's identification and authentication
The application has a mechanism that verifies the complexity of log-in passwords and thus prompts the user to choose the password of the highest security. Moreover, all passwords stored in the data base are encrypted so that no one can retrieve them.
Granting access rights model
Datapoint data room enables differentiation of access rights on object level (folder/document) per individual users as well as groups. It is possible to grant the following access to a file/folder:
- only view,
- view and print
- view and save
- view, print and save.
Document protection
Each user that logs into the data room sees and is able to view, print out and save only these documents, to which he/she has been granted view/print access rights.
In order to prevent uncontrolled document spread through e-version or paper version, as well as taking pictures of the screen where data is displayed, we have introduced watermarks on the documents. They consist of username that is currently viewing the document, project name, current date and time as well as individually modified line of text. There is also no restriction on adjustment possibilities as far as format and display of the watermarks is concerned depending on client preferences and with no impact on access to the document content whatsoever.
User activity reporting
Datapoint data room makes it possible to generate reports on all users’ activity presented also as charts. Because of this functionality an authorized person will have a clear understanding of who and when logged in/out of the system, viewed a particular document, saved it on his/her PC or printed it out.
As a Virtual Data Room provided, Datapoint administrates different servers: production, back-up and test which are collocated in companies with established reputation:
1. Beyond.pl – the most modern server room in Poland and one of the leading in Central-Eastern Europe, cooperating with many companies, such as Volkswagen, Allegro, Dalkia.
2. Poznań Supercomputing and Networking Center – business-science body affiliated to the Polish Academy of Science, providing services for The Polish Television and The Ministry of Science and Higher Education.
These companies guarantee that our severs are maintained in proper conditions, guaranteeing physical security of stored data, alternative connections to the Internet and power supply from several independent suppliers.
All servers are stored in Poland.
Our partnership storage and processing data centre secures access to alternative electric power supplies as well as emergency power supply. Moreover, it offers possibility to use the infrastructure of independent alternative telecommunication operators.
Finally following the best IT practices, we have created and implemented system recovery procedures in case of any outage to ensure the best business continuity services possible.
Our company operations as well as services we offer comply with:
Act on Electronically Supplied Services of 18 July 2002 (Dziennik Ustaw No. 144, item 1204);
Data Protection Act of 29 August 1997 (Law Journal 2002 no. 101 pos. 926 with further amendments)
and its statutory instruments especially:
the regulation Ministry of Interior and Administration of 29 April 2004
concerning documenation of personal data processing and technical and organisational prerequisites that appliances and IT systems processing personal data should meet. (Act Journal no. 100, pos. 1024).
Under the surveillance of Info-excellence that specializes in audits and data security, we have put into practice Information Security Management System according to PN-ISO/IEC 27001:2005 standard.
Datapoint's ISMS is accredited and regularly audited by BSI Group, a leading and independent certifiaction body, carrying out audits and certification programs for management systems.
In order to guarantee the best protection of your resources throughout the whole Due Diligence, we have also established a partnership with the leading providers of scanning services on the polish market, which has been proved to be trustworthy by many companies and financial institutions.
Because we are aiming to provide efficient data room user support services, we have arranged our maintenance processes basing on ITIL methodology, which is a set of best practises in this area.
Our employees form a highly qualified team with proficiency in IT, management as well as expertise in providing similar services.
Everyone who joins our team participates in a range of courses and also learns our security measures and internal procedures, which we utilise when servicing our clients.
