My apologies if this has been answered already, but I couldn’t find anything searching for it. Are JH servers SAS70 certified so we can host banking institution websites? If any information is released, what security measures are in place?
Thank you,
-Ben
NO!!!
And we will not be.
Banking sites should NEVER be on a shared server. In fact we see them on reseller sites quite a bit and 99.9% of the time they are fake banks and get shut down.
My reaction here is very stern, but I used to be in banking and I know many of the rules on this regard, any bank that would even consider being on a shared service needs to be reported as dangerous.
(Note: I do know of one bank that has a site with us, but it is simply a ‘business card site’ with address and phone, this type is different having zero sensitive data at all)
This is a legit bank (we actually have an office next door to them) with multiple branches. What they have, similar to what you mentioned, is a “front-end” site that doesn’t contain any real data. That hooks into their protected data on some other site that is highly secured. I’m not actually sure why they need the SAS for this front-end site, they never needed it before and I used to host it one the shared servers I ran at my last employer (which is why we’re trying to get them to switch to us now) :)..
But no biggee, we’ve let them know we won’t be able to get that certification in our shared environment..
Actually if it has links to their secured site it has to be certified, most of the time these come in package deals where the site hosting the backend will do the front for virtually nothing 