Security

Overview

At eRoom.net we understand that your projects are absolutely critical to your business, and we take our responsibility to provide you with a reliable, secure work place very seriously. We have taken care to ensure that your project materials are always available and always protected. We built eRoom.net, based on the solid foundation of our years of experience providing mission-critical enterprise applications to the world's most demanding businesses. It is this experience that lets us stand confidently behind the security, performance, and reliability of eRoom.net.

eRoom Application Security

At the heart of eRoom.net is the eRoom application itself. Because the eRoom application's most compelling use is as a single, centralized place where project teams access and work on all of their project materials, eRoom software must provide the strongest possible security.

To that end, the eRoom product offers built-in security in several forms:

User Names and Passwords. At the highest level, eRoom software offers basic access control by restricting access to only those with a valid member name and password. Passwords are encrypted and self-selected, and are thus known only to the user choosing the password. For additional security, passwords must be at least 6 characters long and expire after a set period of time. In addition, repeated attempts to access an account will result in the account being temporarily locked to prevent unauthorized access.
Object-level Access Control. At a very fine level of granularity, eRoom software offers the ability to control the type of access (i.e. none, read, or write) each project participant has to each piece of information in a project. Object-level access control is made even more powerful by the ability to form groups of users to quickly implement powerful access policies. For example, using object-level access control and groups, you can create a security policy that allows all members of the HR department to edit materials in a "Personnel Info folder," while limiting other members' ability to only read materials in the same folder.
Encryption of Transmitted Data via SSL. To ensure that data is not intercepted or "sniffed" as it is transmitted between the server and the user's machine, once a user has logged into eRoom.net, all communication is encrypted using secure sockets layer (SSL).

These features work together to provide exceptionally strong security for all materials in your eRoom.net projects. And, of course, if you have any further questions about security issues, simply drop us a line at info@eRoom.net.

EMC Global Solution Center Security

In addition to application security, eRoom.net offers extraordinary network and server security through the EMC Center ("EMC GSC"). The EMC hosting center is a physical and virtual fortress designed to ensure on-going access and connectivity to your data while providing top-notch security.

All eRoom.net servers reside in a secure data center, protected by electronic access and scanning devices that control physical access to the servers by verifying the identity of those trying to gain access to the data center. The center is monitored 24 hours a day, 365 days a year by highly-skilled network engineers who are trained in the art of intrusion detection at the network, application, and operating system level. EMC GSC has also "hardened" the operating systems of all eRoom.net servers, disabling unnecessary features and services that could make the operating system less stable or more susceptible to hackers.

the EMC GSC's network architecture also provides superior security. EMC employs redundant firewalls as part of their perimeter defense, thus ensuring that only legitimate, registered eRoom.net users can exchange data with eRoom.net servers. Further, all eRoom.net servers reside on their own virtual local area network (LAN), preventing any co-mingling of data from other EMC GSC customers.

Performance and Reliability

Security is only one aspect of system robustness, however. After all, what good is a secure server if it's inaccessible half the time, or if it's too slow to be useful? That's why eRoom.net has focused on performance and reliability, as well as security.

In terms of performance, eRoom.net uses state-of-the-art, high-powered servers equipped with 1 GB of memory. The eRoom.net virtual network runs at 100 Mb/s and connects to the EMC GSC's proprietary PriorityPeering network which offers direct connectivity to more than 85% of all Internet users, with performance as much as four times greater than conventional ISP private peering networks.

To ensure the highest possible reliability, eRoom.net leverages EMC GSC's fully-redundant architecture to offer a guarantee of 99% availability. This architecture includes:

Fully-redundant routers, switches, and firewalls,
Automated nightly back-up,
Battery and diesel-generated power backup,
Raised floor facilities, and
A sophisticated fire suppression system.

The Bottom Line

The bottom line is that we at eRoom.net really do understand how important your projects are, and we want you to count on us to do everything possible to ensure the security, performance, and reliability of your eRoom.net projects. If you have any questions about eRoom.net security, performance, or reliability, please drop us a note at info@eRoom.net.

Please refer to your Registration Agreement or other legal document between you and Documentum for a description of our warranty of 99% availability and a complete statement of any other warranties and remedies available to you in connection with our services. We hope the information presented here has been helpful, and we look forward to working with you and your team to make eRoom.net the place where projects get done.

Last modified June 28, 2004.