Compliance Enablement

FedRAMP / FISMA

Meets the most demanding compliance standards for hosted infrastructure established by U.S. Federal government national security data and applications.

The Federal Risk and Authorization Management Program (FedRAMP) is a government program providing a standardized approach to security assessment, authorization, and continuous monitoring for cloud products/services. DataBank has a pedigree in deploying secure and compliant solutions for mission critical systems governed by FedRAMP and FISMA. Our team of experts supports the full cycle of your hosting and cloud infrastructure, including design, deployment, testing, validation, and defense-in-depth protection.

Backed by a 24/7 SOC and NOC, we go beyond typical IaaS boundaries of the hypervisor, diving deep into the PaaS layer for operating systems, applications, and day-to-day operations. DataBank has undergone a 3PAO audit and validation process utilizing the latest NIST 800-53 security framework.

Data Center	Data Center Name	Address	FISMA	FedRAMP
ACT1	Waco Data Center	700 Austin Avenue Waco, TX 76701
ATL2	Atlanta West End Data Center	1100 White Street Southwest Atlanta, GA 30310
ATL3	Atlanta West End Data Center	1150 White Street Southwest Atlanta, GA 30310
DEN1	Englewood Data Center	393 Inverness Parkway Englewood, CO 80112
DEN2	Centennial Data Center	6900 South Peoria Street Centennial, CO 80112
DFW1	Downtown Dallas Data Center	400 South Akard Dallas, TX 75202
DFW2	North Dallas Data Center	904 Quality Way Richardson, TX 75081
DFW3	Plano Data Center	8375 Dominion Pkwy Plano, TX 75024
HOU1	Westway Park I Data Center	5150 Westway Park Blvd, Houston TX, 77041
HOU2	Westway Park II Data Center	5170 Westway Park Blvd, Houston TX, 77041
HOU3	Westway Park III Data Center	11003 Corporate Centre Dr, Houston TX, 77041
HOU5	Houston Galleria Data Center	4201 Southwest Freeway, Houston, TX, 77027
IAD1	Ashburn Data Center	21635 Red Rum Drive Ashburn, VA 20147
IAD2	McLean Data Center	1764A Old Meadow Lane McLean, VA 22102
IAD3	McLean Data Center	21630 Red Rum Drive Ashburn, VA 20147
MCI3	South Lake Campus Data Center	11200 Lakeview Ave Lenexa, KS 66219
MSP2	East Twin Cities Data Center	3255 Neil Armstrong Blvd Eagan, MN 55121
MSP3	Brooklyn Park Data Center	8111 Oxbow Creek N Brooklyn Park, MN 55445
ORD3	Mount Prospect Data Center	800 E. Business Center Drive Mount Prospect, IL 60056
ORD4	Chicago Tri-State Data Center	1808 Swift Drive Oak Brook, IL 60523
PIT2	Summit Park Data Center	35 Summit Park Dr Pittsburgh, PA 15275
SLC5	Granite Point Data Center	14850 S Pony Express Rd Bluffdale, UT 84065
SLC6	Granite Point Data Center	14850 S Pony Express Rd Bluffdale, UT 84065

HIPAA

Helping Covered Entities and the service providers who support them to meet the compliance requirements associated with electronic Protected Health Information (e-PHI) data and applications.

Healthcare has gone digital: from electronic health records to payer health care portals to medical device connectivity, the health care industry is striving for better patient outcomes through sophisticated technology. The steady move to digital has resulted in an avalanche of data that requires the utmost privacy as regulated by the Healthcare Insurance Portability and Accountability Act (HIPAA). DataBank is a trusted service provider to Covered Entities who manage electronic Protected Health Information (e-PHI) or provide services to companies that manage e-PHI in their applications.

DataBank performs several annual audits in each of our data centers facilities. The standards we engage in give DataBank clients peace of mind, knowing their data is housed within a top-tier facility adhering to the most stringent audit requirements in the industry. Our shared risk model and BAA allows you to transfer as much as 80% of HIPAA controls to DataBank to unburden your team and make compliance easier.

PCI-DSS

Meets Payment Card Industry Data Security Standards for credit card transactions.

Payment Card Industry Data Security Standards or PCI-DSS sets the worldwide information security standards for credit card transactions to help control and minimize points of risk to fraud or compromise of sensitive information. PCI Compliance is an adherence to these rigorous standards in the way your business conducts and handles the information. DataBank provides the facility and critical infrastructure which complies to a Report on Compliance (RoC), issued annually to our facilities. The RoC ensures we meet or exceed all of the audit controls. For this reason, many companies and merchants turn to DataBank to conduct their credit card business within our secure facilities. In that capacity, DataBank has specific responsibilities that must be PCI Compliant. As a provider of data center and managed services to some of the largest publicly traded companies in the world, DataBank is committed to performing PCI-DSS audits on an annual basis.

SSAE / SOC 1 & SOC 2

Gold-standard certifications for data center operational controls.

The SSAE is the gold standard within the industry and an integral part of DataBank’s business model. Cyber security is of paramount importance to our customers, especially those in industries with great regulatory scrutiny. SOC2 standards are based on the proven SysTrust-derived standards of Availability, Security, Confidentiality, Privacy, and Processing Integrity.

As a provider of services to some of the largest publicly-traded companies in the world, DataBank commits to perform a rigorous SSAE audit in every one of our data center facilities. Audits are conducted by an independent third-party and verified by the American Institute of Certified Public Accountants. Our compliance includes testing managed services for operating systems and application-level environments across control considerations, including user access, network monitoring and performance, backups, etc.

DataBank performs these audits proactively, saving clients manpower and capital. This also allows for a de facto standard to be met in conjunction with financial statement audits such as FISMA, FedRAMP, or Sarbanes-Oxley.

GDPR and Data Privacy Framework

Meet the standards established by the European Union and U.S. Federal government for exchanging personal data between the continents.

DataBank's certification demonstrates that our customer privacy procedures comply with the Privacy Shield Principles, covering a range of requirements, including: Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability. DataBank's customers can be assured that their programs comply with these stringent privacy and security safeguards.

ITAR

Ensuring IT infrastructures meet the requirements of the International Traffic in Arms Regulations.

DataBank is committed to ensuring the compliance and security protocols are in place for customers registered with International Traffic in Arms Regulations. If your organization is subject to ITAR, you can trust in our compliance experts, including a dedicated CISO, to provide support for your needs. Third-party audits take place annually to demonstrate security capabilities, with relevant certifications including a FedRAMP ATO, SSAE 18 SOC 1 and SOC 2, HIPAA/HITECH, and PCI DSS.

ITAR registered colocation and managed services customers can rely on our wide-ranging security program which ensures full compliances with ITAR stipulations. DataBank is fully equipped to support your ITAR needs across all data center facilities and services.

NIST Certified

DataBank's facilities meet the most stringent requirements established by the U.S. Federal Government's National Institute of Standards and Technology (NIST).

Whether your organization processes federal data or you're simply looking for higher standards in your data center, DataBank is fully equipped to support your needs.

ISO/IEC 27001:2022

The world’s best-known standard for information security management.

ISO/IEC 27001:2022 — the world's best-known standard for information security management — defines the requirements that security systems must meet. DataBank follows the certification requirements to promote a holistic approach to information security — vetting people, policies, and technology — to assure information security management systems are implemented according to this standard for risk management, cyber-resilience, and operational excellence.

DataBank received certification from ISO — the International Organization for Standardization — for our internal corporate IT systems as well as all our colocation data centers in the U.S. hosting customer IT infrastructures. The ISO/IEC 27001 standard provides guidance for establishing, implementing, maintaining, and continually improving information security management systems. Conformity with the standard also signifies DataBank has implemented a system to manage risks related to the security of our data, and the system follows all the best practices and principles enshrined in the standard.

By receiving ISO/IEC 27001:2022 certification, DataBank demonstrates to stakeholders and customers across the globe that we are committed and able to manage information securely and safely.