PI^® SECURITY & TRUST

Microsoft Azure

Project Insight SaaS online is hosted entirely in Microsoft Azure. Microsoft Azure data centers are globally distributed, and provide zone resiliency which prevents PI from downtime in the event of a single data center failure.

Microsoft Azure meets most Global, US Government, Industry and regional certification standards, including these common certifications:

• SOC 1, 2, & 3
• CIS Benchmark
• FedRamp
• Section 508 VPATS
• ISO 20000-1:2011, 22301, 27001, 27017, 27018, 27701, 9001
• HIPAA/HITECH
• PCI DSS

Full list of Microsoft Azure Compliance reports.

What does this mean? Project Insight is deployed in the most redundant, secure, and capable data center network available.

Please contact your PI account manager for a copy of the Project Insight SOC 2 Audit report.

Your data is housed in a SQL Azure premium database, which is a modern, highly available, fault tolerant, continuously backed up database application.

What does this mean? When you use Project Insight, your data is automatically replicated to multiple data center facilities and backed up in real time, keeping your project information safe and available 24/7/365.

Disaster Recovery Plan
Project Insight has a disaster recovery plan which includes step by step instructions for completely installing and restoring the Project Insight system. This plan is accessible only to authorized Project Insight personnel. The plan is not published publicly as there is sensitive information within the plan that may compromise the security of the hosted or cloud environment.

Disaster Restoration
In the event of a complete catastrophe, Project Insight is prepared to be restored within 12 hours of a total data center failure.

Insurance
Project Insight has insurance coverage in many areas, including technology, media and professional services.

All data is transmitted via Secure Socket Layer (SSL) and therefore encrypted as it passes over the internet. All user credentials are hashed. All data is encrypted at rest.

Removal of Customer Data
If a customer chooses not to renew service with Project Insight, the service is cancelled and the customer data is deleted within six months of cancellation.

Data Extraction Services
Customers may request a copy of their data be extracted and sent to them. This involves Professional Services and is performed for a fee.

Seizure of Data
In the unlikely event that a governmental, regulatory body or court order requires us to disclose customer data, Project Insight will provide advanced notice to the customer, then disclose the information as required by law. Disclosure will be limited to the minimum extent required to comply with such regulation or order.

Hardware Erasure & Destruction
Data is destroyed both through complete US DoD erasure and physical destruction of the media. In the less common occurrence of a media failure, it is performed by physical destruction only.

System Status Blog
Project Insight posts all planned and unplanned events on the DevOps System Status page. If you are experiencing an outage or slow down, go the link for updates.

Email Notifications
If the system is experiencing a slow down or outage, we will post to the DevOps System Status page first. When we have more information about the issues or cause of the issue, we email the Designated Support Contacts of our customers. This email reminds customers to re-visit the DevOps posts for updates.

Twitter
Follow PI on Twitter @ProjectInsight for an up-to-the-minute System Status when downtime is being experienced.

Software Updates & Upgrades
Project Insight performs regularly scheduled maintenance for infrastructure updates such as Firmware, the operating system and database software. Maintenance is also scheduled as needed for application software updates and patches.

PI uses a standard scheduled maintenance window for performing updates to our software. During these scheduled windows, we are usually down for about 15 minutes. We typically release on two-week cycles. Both the frequency and the duration of the downtime could be different without notice.

Date	Start Time	End Time
Tuesday	6:00 PM PT	8:00 PM PT
Thursday	6:00 PM PT	8:00 PM PT
Saturday	8:00 AM PT	12:00 PM PT

Application Administration Security

• Login session timeout
• Disable remember username on login
• Disable remember username of mobile login
• Control browser password auto-complete on login and mobile
• Determine password strength and requirements
• Lockout users after failed login attempts
• Set a password expiration period
• Disallow re-use of previous passwords

Single Sign On
Project Insight can be configured by administrators to require Single Sign On (SSO). Project Insight supports out of the box SSO with Microsoft Azure AD. Project Insight supports any SSO provider capable of SAML 2.0, including Window ADFS.

Escrow Policy
Project Insight offers its customers an optional escrow program. Should an event occur that renders the organization insolvent, customers that have signed up for the escrow program will be able to access the complete software application and source code from the escrow provider. This third-party escrow company possesses the entire application and source code in escrow.

Seizure of Data
In the unlikely event that a governmental, regulatory body or court order requires us to disclose customer data, Project Insight will provide advanced notice to the customer, then disclose the information as required by law. Disclosure will be limited to the minimum extent required to comply with such regulation or order.

U.S. Based
Many customers have government restrictions that they need to follow regulations like ITAR (International Traffic in Arms Regulations) and EAR (Export Administration Regulations). All of Project Insight's developers are located in the U.S. The technical support team is located in the U.S. The multi-tenant SaaS edition and all of its back ups are located in the U.S. Also, a dedicated Azure instance may be set up in any U.S. location. All of our team members that have access to our hosted data farms are U.S. citizens or valid green card holders and have been security-screened.

On-Premise System Requirements
For details about on-premise system requirements, click here.