The Servers and Application
The applications and customer data reside on modern high-availability servers, protected by multi-level firewall and intrusion detection technology. Vulnerability scans are conducted on a regular basis by a PCI Approved Scanning Vendor. Full system backups are performed nightly. Incremental backups are performed on a continuous basis throughout the day. Backup system copies are encrypted and immediately moved to an equally secure facility on a daily basis. All data transmission to and from the servers, including XML traffic, is encrypted using SSL certificates issued and managed by Thawte.