Orange County NC Website
<br />18. What are the contractually required notification period for the County or the cloud vendor <br />for termination of the cloud services? <br />a. 30 Days written notice from term date. <br /> <br />19. Describe how the County’s data will be stored, managed and archived. <br />a. PhotoShelter employs the best--of--breed technology platforms at every security <br />layer— from firewalls and access--management to intrusion detection, and is <br />working with industry leaders like Norse Corp on next--generation security <br />platforms. In 12 years of managing our own proprietary cloud--based platform, <br />our system has proven its reliability with a track record of greater than 99.9% <br />uptime with several petabytes of data being managed — which includes multiple <br />replicas of over 285 million images and more than 5 million new professional <br />grade images monthly. We have 100% durability and have not lost a single bit of <br />data in 10 years. Regarding the security of the system, we employ two separate <br />outside scanning vendors called Comodo and Nessus. These two services scan our <br />system both daily and monthly for vulnerabilities at the OS, Network, and <br />Application levels as well as across our two data centers and corporate <br />environment. We have two primary data centers — one with Tel’x in the Google <br />Building in New York and one on the West Coast with Layer42 in Santa Clara. <br />Both facilities have state--of--the--art security including 24x7 guards, video <br />surveillance, biometric entry systems and servers housed in cages under lock and <br />key. The system has built--in redundancy such that replicas of all data/media <br />assets exist on both the East and West Coast, enabling complete fail over to the <br />opposite coast in the event of an emergency. We have passed rigorous security <br />audits from highly scrutinizing clients, including government entities like the <br />New York City Mayor’s Office. Our Chief Scientist is also the founder of a <br />recognized computer security firm, while our VP of Network Operations was the <br />former “Chief Network Paranoid” at Yahoo. <br /> <br />20. Will the County’s data be stored and managed on a storage system with other data? <br />a. Yes <br /> <br />If Yes, Explain: The County will not get it’s own dedicated server, but the data of every 1,100 <br />Libris client is partitioned completely separate from each other. Every file uploaded will <br />be duplicated across our datacenters for a total of 4 redundant copies. <br /> <br />21. At what architectural point in the provider’s cloud facility will the County’s data be <br />physically connected to networking equipment with non-County data? <br />a. None <br /> <br />22. What are the cloud provider’s information security policies? <br />a. As a private company, we do not disclose this level of detail for security purposes <br />as this would expose proprietary information and open us to unwarranted risk. <br />Please refer to our Security Overview for additional information : <br />https://welkerlibris.photoshelter.com/galleries/C0000dA4gktF6a90/G0000VFCK <br />DocuSign Envelope ID: 576DD5DB-E4A9-406B-8F7C-CC4EF3C2484FDocuSign Envelope ID: 79107112-9BB9-477B-B662-FF2F869640FC