Security and Compliance

As an archival company, one of ARQUO’s top priorities is keeping customers information safe and secure. To achieve these goals, ARQUO implements several backup mechanisms and policies that safeguard data for a later recovery in the event of a physical or logical problem.

Procedures include:

• Selecting realiable and certified cloud and SaaS providers
• Keeping several copies of information in different storage tiers
• Logging every operation done on the platform
• Use versioning of objects
• Monitoring application performance and security
• Segregate information for every tenant of the platform
• Use worldwide resources for instanteous disaster recovery
• Promote responsible use of technology enforcing secure password management

Because most of our customers are service providers and BPOs that have customers themselves, our procedures include the full chain of responsability from the infrastructure provider to the end-user.

In ARQUO, all information has a single point of entry, the public API, no matter what device or application was used to interact with the platform. By using a single point of interaction, ARQUO can easily enforce standard security policies for all devices, particullarly important in the mobile era.

The next diagram shows the information cycle:

For physical documents, the process starts either at the customer or at the service provider that scans and indexes the information to a local storage.

If information was born digital, then it can be indexed or directly sent to the plaform.

All information captured, content and metadata, is backed up at the moment of ingestion on our vault storage after being checked and imported into the platform.

ARQUO stores the binary content and metadata on the online storage and keeps copies of indexing information in databases and search engines for operational, indexing and reporting purposes.

We offer our customers a 99.999999999% durability of objects over a given year. This durability level corresponds to an average annual expected loss of 0.000000001% of objects. For example, if you store 10,000 objects, you can on average expect to incur a loss of a single object once every 10,000,000 years.

Durability is the ability of not losing data by implementing redundancy, replication and checksum validation for detecting data corruption.

Versionsing garantees an additional level of protection by providing a means of recovery when customers accidentally overwrite or delete objects. This allows you to easily recover from unintended user actions and application failures.

Additionally to this level of service offered by our online storage, we have the backup storage that adds a second level of protection.

Our online databases have the same level of reliability has our storage.

The operational and content metadata indexed on the search service runs on a cluster with data duplication and is backed up with:

• Snapshots every 30 minutes. These snapshots are kept by a 48 hours.
• Full daily snapshot that can be kept as long as the customer wants.

ARQUO is housed at third-party infrastructure as a service (IaaS) and uses managed services (SaaS) providers located in Europe and United States. These third-party service providers are responsible for the infrastructure and operational security controls at the boundaries of the ARQUO system and are presented below. ARQUO is responsible for the logical and application security.

For any further information about security and compliance fell free to contact us at our office at working hours or by mail to mail@arquotech.com.

ARQUO Service Providers

Amazon Web Services (AWS) is cloud computing platform from Amazon that provides customers a wide collection of cloud services. Among the cloud services offered by AWS are S3, a Storage Service which provides customers with a highly durable storage infrastructure, because it is designed to provide 99.999999999% durability, versioning and Lifecycle management.
The AWS quality management system is ISO 9001 certified and this certification directly supports customers who develop, migrate and operate their quality-controlled IT systems in the AWS cloud. Customers can leverage AWS’s compliance reports as evidence for their own ISO 9001 programs and industry-specific quality programs. AWS customers who don't have quality system requirements will still benefit from the additional assurance and transparency that an ISO 9001 certification provides.

Dropbox is cloud storage service that enables customers to store files on remote cloud servers and the ability to share files within a synchronized format.
Dropbox offers two types of service, Standard and Business.
Standard version offers a 99.99% durability and includes 30-day version history, in case you accidentally delete a file or want to restore a previous version.
Business version offers a 99.999999999% durability and includes unlimited version history.

Found is a hosted and fully managed search engine service built on top of Elasticsearch, a distributed, multitenante-capable full-text search engine based on Lucene with a RESTful interface and schemaless JSON documents support.
This managed service implements backups throught a snapshot mechanism provided by Elasticsearch.

LunaCloud is cloud services provider that delivers reliable, elastic and low cost cloud infrastructure services(IaaS), on which customers can run their environments and applications or store their data.
As a Storage Service, LunaCloud provides a secure and redundant storage that replicates data in at least 3 different physical disk stores, each with built-in redundancy for optimal protection.

MEO Cloud is a file storage and synchronisation service. MEO Cloud garantees that keeps customer files secure and accessible from any device (pc, tablet or smartphone). The files are stored redundantly on order to ensure that no data is lost and includes 30-day version history, in case you accidentally delete a file or want to restore a previous version.