Security Policy

At Maintenance Assistant (dba Fiix) we know that our customers rely on us as a critical part of their business processes and record keeping. Security is an integral component of providing an accessible and reliable maintenance platform and we treat the security of our infrastructure as a priority one item.

Reliability of the Maintenance Assistant (dba Fiix) Platform is measured by two components: (1) Security measures which consist of preventive measures to protect against intrusion and unauthorized access to data and (2) Recovery measures which consist of both preventive and recovery systems to ensure continuity of service in the event of a disaster.

I. SECURITY

SSL

All information travelling between your browser and the Maintenance Assistant platform servers is protected from eavesdroppers with 256-bit SSL encryption. The lock icon in your browser lets you verify that you aren’t talking to a phishing site impersonating Maintenance Assistant (dba Fiix) and that your data is secure in transit against unauthorized eavesdropping.

Firewalls

Maintenance Assistant Platform’s VPC is is fully integrated with Amazon EC2 cloud, backed by EC2 standard Cisco-powered firewalls.

Maintenance Assistant Platform VPC terminates all HTTPS access on internet facing load balancers. Application and database servers are not accessible via DMZ.

Intrusion detection

All traffic entering and leaving the Maintenance Assistant Platform network is monitored by Amazon Security, as a standard service provided by Amazon EC2.

Maintenance Assistant employs a second line monitoring to scan additional information on the usage of each CMMS account, and block unauthorized access to the Maintenance Assistant platform on a per session level.

Encryption

Particularly sensitive information – credit card numbers, bank account information, and your payment gateway account details – are encrypted and handled by our payment gateway providers, PayPal and Stripe, both which are industry leaders in keeping financial information secure and are certified PCI level 4 for storage of sensitive data at rest.

Physical security

The Maintenance Assistant VPC servers are located in state-of-the-art data centers within Amazon EC2 in multiple locations Canada, the USA and elsewhere. Each center is professionally managed by our primary provider, Amazon EC2 and their certified affiliates providing biometric access controls, constant surveillance, redundant power feeds and generators, robust fire suppression, and carefully monitored climate control to protect the servers that store your data, community accounts, and manage your Maintenance Assistant CMMS.

II. RELIABILITY AND RECOVERY

Redundant servers and datacentres

The Maintenance Assistant infrastructure uses redundant storage and servers that are professionally managed by Amazon to keep the Maintenance Assistant Platform and your data available in the case of hardware failure. Additionally, the Maintenance Assistant Platform implements hot fail-over architecture distributed across multiple VPCs comprising up-to-date application servers and storage in a geographically separate data centres in case their primary data centre is made unavailable by a disaster or other disruption.

Managed hosting

Maintenance Assistant has chosen Amazon EC2 for our hosting needs. Amazon is an industry leader with many bluechip and Fortune 1000 companies as clients. Maintenance Assistant carefully and confidently chose Amazon to provide the world-class performance and service demanded by our world-wide customers to safely and securely run their mission-critical Maintenance Assistant CMMS asset management systems.

Backups for SaaS

The data in your Maintenance Assistant CMMS system and account is replicated across multiple database servers in multiple geographic locations to prevent a single failure from causing data loss. Additionally, data is backed up nightly to tape and stored in a secure offsite location to ensure that, even in the event of a catastrophe like a fire, earthquake, tornado or flood, your information will be safe and your records can be quickly restored.

If you have any security concerns or questions on how Maintenance Assistant implements security and disaster recovery strategies please contact our team.