Orange County NC Website
Browse       Search
DocuSign Envelope ID:90A54439-23B9-40AF-8246-BFCAAEAA529D <br /> Submittable may terminate the service, if the customer fails to pay any Fees, and such <br /> failure continues more than twenty (20) days after Submittable's delivery of written <br /> notice to the customer. Other provisions apply for other types of termination events. For <br /> more information,please refer to the relevant provisions of the Submittable Customer <br /> Terms of Service. <br /> 19. Describe how the County's data will be stored, managed and archived. <br /> All data, including backups, are stored with AWS in the Northern Virginia region <br /> (us-east-1). Our database is also mirrored across AWS availability zones, and we run web <br /> application servers in multiple availability zones. If there is a failure in our primary <br /> availability zone, the system will automatically failover to the secondary availability <br /> zone. <br /> 20. Will the County's data be stored and managed on a storage system with other data? <br /> Submittable stores all customer data in one SQL server database (multi-tenant) with <br /> logical separations. Tenant data is separated by using foreign keys and application logic. <br /> If Yes, Explain: Click here to enter text. <br /> 21. At what architectural point in the provider's cloud facility will the County's data be <br /> physically connected to networking equipment with non-County data? <br /> Submittable stores all customer data in one SQL server database (multi-tenant) with <br /> logical separations. Tenant data is separated by using foreign keys and application logic. <br /> 22. What are the cloud provider's information security policies? <br /> A copy of our information security policy is available upon request. <br /> 23. What are the cloud provider's incident management and reporting policies? <br /> A copy of our incident response policy is available upon request. <br /> 24. What is the process by which the cloud provider updates policies and informs customers? <br /> Submittable notifies customers by email of any updates to its privacy policy. Our internal <br /> policies are audited annually as part of our SOC 2 and HIPAA compliance, and the <br /> sufficiency of those policies are reflected in those audit reports. <br /> 25. What is the basic architecture of the cloud provider's network security? (overall design, <br /> zones, filters, firewalls, VLANs,protocols, standards) <br /> Our architecture diagram is available upon request. <br /> 26. What security measures does the cloud provider use in data storage, transit and use? <br /> For a full description of our security controls, please refer to our latest SOC 2 Type 2 <br /> report. <br /> 27. What encryption technologies does the cloud provider use in data management? <br /> All data is encrypted both in transit and at rest using standard AWS methods. We use <br /> AWS' Relational Database Service and AWS S3's built-in encryption, which uses <br />