Security and Compliance

Modern business data storage practices come with stipulations, guidelines and compliancy requirements which the majority of companies must adhere to. NowX adds ease to this process by arriving pre-compliant with all major certifications and compliances.

NowX security not only covers data held locally, but also data during transit between local store and either your company’s public or private cloud as necessary. Due to the shared-occupancy nature of the cloud environment, security is the highest concern and NowX takes all precautions necessary on your organization’s behalf.

NowX Cloud Backup and Recovery is the most secure agentless data protection platform in the industry.

NowX Encryption Facts:

• NowX encrypts all data for the lifetime of your data, no matter if it’s in-flight or at-rest.
• FIPS 140-2¹ certified – an independent third-party certification.
• Fully encrypted transfer between laptops, remote offices, central data repositories, local storage and private or public cloud.
• Key escrow management
• Password rotation support
• Data destruction certificate protocol capable

NowX offers encryption strengths ranging from triple DES 56-bit (8-character key) to AES 256-bit (32-character key). NowX also features legacy compatibility ensuring that no matter if your data is encrypted today, you will still be able to access it ten years from now.

The Asigra core at the heart of the NowX platform has an unquestionable security track record:

• Zero breaches or compromised systems in the last 25 years of operation
• IANA² registered ports
• All data stored in compressed and encrypted format
• Digital signature for every file and block of data
• Data on disk resides in self-describing format
• Background Autonomic Healing and System Admin
• Restorability Validation Process (digital signature check)

It is possible to align your organization’s existing security protocols with your data protection policies. NowX includes a feature set which allows for auto generation of passwords. Passwords are changed on a random basis for specific backup user accounts, adding an extra layer of protection against unauthorized account or data access.

NowX can also aid your business in its quest to obtain and retain compliancy. The mere fact that NowX is a disk-based, automated solution as opposed to a manually assisted tape backup procedure qualifies for compliancy with regulations such as Sarbanes Oxley (SOX), U.S. Health Insurance Portability and Accountability Act (HIPPA), and Gram-Leach-Billey Act (GLBA), Payment Card Industry Data Security Standard (PCI DSS), Basel II, Safe Harbour, Patriot Act, American Recovery and Reinvestment Act (ARRA) and others.

Tape and other traditional backup solutions are not centralized in structure and therefore can lead to difficulties and delays in obtaining and providing data to auditors in a timely manner. NowX’s aggregated backup approach allows for immediate on-demand recovery.

Traditional backup methodology requires additional involvement or extra products in order to execute offsite data transfer from disk or tape. All data being passed through NowX for backup to offsite private or public clouds is automatically and securely processed under FIPS 140-2 certified security requirements.

¹ FIPS 140-2 is the standard for security requirements for cryptographic modules by The National Institute of Standards and Technology (NIST). NIST is an agency of the U.S. Department of Commerce. Federal Information Processing Standards Publications (FIPS PUBS) are issued by the NIST.
² The Internet Assigned Numbers Authority (IANA) is responsible for the global coordination of the DNS Root, IP addressing, and other Internet protocol resources. Ports 4400 through 4406 are registered to Asigra and cannot be used by any other application.