Simply Secure Compliance with DataLocker

Ensures defense contractors implement adequate cybersecurity practices. DataLocker’s SafeConsole DeviceControl and PortBlocker, along with hardware-encrypted USB storage, help maintain data security in accordance with CMMC requirements by managing and protecting sensitive defense information.

Regulates the handling of protected health information (PHI) in the healthcare sector. DataLocker’s solutions ensure secure storage, transfer, and access to PHI, meeting HIPAA’s strict privacy and security rules.

Mandates the secure retention and management of financial data. DataLocker’s SafeConsole DeviceControl, PortBlocker, and hardware-encrypted USB storage safeguard financial information, helping organizations maintain SOX compliance.

Ensures defense contractors implement adequate cybersecurity practices. DataLocker’s SafeConsole DeviceControl and PortBlocker, along with hardware-encrypted USB storage, help maintain data security in accordance with CMMC requirements by managing and protecting sensitive defense information.

An international standard for information security management systems (ISMS). DataLocker’s products align with ISO 27001’s risk management and security controls, ensuring a comprehensive ISMS.

Aims to protect essential services and digital service providers from cyber threats. DataLocker’s solutions help organizations adhere to NIS2 by securing sensitive data and maintaining robust cybersecurity practices.

Regulates the handling of California residents’ personal information. DataLocker’s products support CCPA compliance by safeguarding personal data and preventing unauthorized access.

Protects EU citizens’ personal data and privacy. DataLocker’s solutions facilitate GDPR compliance by ensuring secure data storage, transfer, and access while upholding data subjects’ rights.

Requires federal agencies to secure their information systems. DataLocker’s products help agencies meet FISMA requirements by safeguarding sensitive information and maintaining secure information systems.

Regulates the protection of consumer financial information by financial institutions. DataLocker’s solutions ensure secure data storage and access, meeting GLBA’s privacy and safeguard rules.

Governs the collection, use, and disclosure of personal information in Canada. DataLocker’s products support PIPEDA compliance by securely managing and protecting personal data.

All SafeConsole data centers meet the following compliance standards: CSA, ISO 9001, ISO 27001, ISO 27017, ISO 27081, PCI DSS Level 1, SOC 1, SOC 2, SOC 3. Also, please note that SafeConsole Cloud is a single-tenant solution, meaning that only your company’s service is hosted on that specific virtual server. Note also that no actual data from the storage products is saved on the cloud. Only SafeConsole, the management console, is hosted on the cloud.

SafeConsole data centers are located in the following locations:

• US East (Ohio)
• US East (N. Virginia)
• Canada (Central)
• Asia Pacific (Singapore)
• Europe (Ireland)
• Europe (London)

• DataLocker account passwords are hashed. Our own staff can’t even view them. If you lose your password, it can’t be retrieved—it must be reset.
• All login pages (from our website and mobile website) pass data via TLS.
• Login pages have brute force protection. We perform regular security penetration tests throughout the year.

The IronKey EMS Cloud data centers have been certified by national and/or international security standards. No actual data from the storage products is saved on the cloud. Only IronKey EMS Cloud, the management console, is hosted on the cloud.

• The California USA facilities are SSAE16 SOC-2 Type II certified.
• The Virginia USA facilities are SSAE16 SOC-2 Type II certified.
• The Kansas City, Kansas, USA facility is SSAE16 SOC-2 Type II certified.

• DataLocker offices are secured by biometrics, keycard and or key access, and they are monitored 24/7 with infrared cameras throughout.
• Our office network is heavily segmented and centrally monitored.
• We have an internal security team that constantly monitors our environment for vulnerabilities. They perform penetration testing and social engineering exercises on our environment and our employees. Our security team includes CISSP certified members.