SoftLayer Receives SAS 70 Type II Certification
Certification Verifies Data Center Security, Redundancy, and Personnel Controls
December 22, 2008, Dallas, TX – SoftLayer has completed a SAS 70 review, including the assessment of all processes and systems necessary to complete an accompanying Type II report. The audit and evaluation were part of the on-demand IT leader’s ongoing commitment to provide customers with industry-best standards and practices.
A SAS 70 Type II review is an in-depth survey of a service organization’s control objectives and activities, with an evaluation of the organizations’ effectiveness in meeting those control objectives. It is an important step for any service organization supporting outsourced, mission-critical, and information technology services. The survey includes a full assessment of:
- Oversight by executive management
- Operations and customer service
- Development and information technology organization
- Human resources policies and procedures
- Risk assessment monitoring
SAS 70 data centers must maintain prescribed levels of data security and redundancy, as well as personnel controls. The data center’s staff cannot access servers or data without a specific procedure. All systems access and activity must be logged, and all physical access is highly controlled.
“We are very excited to have completed this process,” said Steve Kinman, SoftLayer Customer Service Manager. “It gives us an objective standard for assuring all of our customers, of all sizes, that we provide reliable, tested, and secure hosting services based upon industry-recognized standards.”
SoftLayer's review was conducted by an independent auditing agency and included extensive testing performed over a six-month period. It involved all existing SoftLayer data center facilities in Dallas, Seattle, and Washington, DC. | 
