Definitions

Introduction

Novohit Cloud Instances

1.  Rocky Linux 8 Operating System
   
2.  Located in the United States or Canada
   
3. SSD disks (with NVMe option) with sufficient capacity to run Novohit without limitation.
4. Between 4 and 32 Intel or AMD CPUs (Processors)
   
5. Between 8GB and 256GB RAM
   
6. Additional weekly automatic imaging in addition to SBUM agreement
   
7. Bandwidth 6TB, virtually unlimited
   
8. Static IP
   

Certifications

1. SOC 1 Type II
   
2. SOC 2 Type II audited by Ernst & Young LLP
   
3. ISO/IEC 27001:2013 audited by ISO/IEC
   
4. Cloud Security Alliance CSA Self-Assessment audited by Cloud Security Alliance
   

Continuity

1. Private Cloud platform features are redundant and certified.
   
2. Novohit's General Security and Continuity Features
   

Security

1.  Implementation of all protocols that guarantee the certifications awarded and listed in the Certifications section.
   
2.  Restriction of physical access to datacenter facilities, according to the security features of the certifications mentioned above.
   
3. Inbound Port Closure through Firewall or Firewall rules are based on the network and stateful control. Firewalls block all traffic that is not expressly allowed by the following rule. In general the allowed inbound rule is port 443 TCP or 1194 UDP on IPv4. In cases of VPN connections, only the corresponding VPN port is enabled.
   
4. Connection to the server for administration tasks by Novohit with 3 levels of authentication and via DMZ proxy, access to which is reserved for specialized Novohit personnel with credential control. No third party access.
   
5. Optional: Connection through VPN for access to the INTERNAL PLATFORM by Users. Requires coordination and is evaluated on a case-by-case basis.
   

monitoring scheme, the Novohit Cloud service has an additional monitoring layer that collects metrics on resource usage at the instance level and alerts on specific metrics such as abnormal CPU, RAM, Bandwidth and Disk Usage with integrated notifications to our help desk with alerts for our staff to be aware and track the operational health of the instance.

For more details on auditing, monitoring, vulnerability and penetration testing activities, see the Auditing and Monitoring section of Novohit's General Security and Continuity Features.

Independent Audits:

In addition to the Random Audits for Cloud instances, the following audits are associated with the certifications mentioned in the Certification section.

For more details, see the Novohit General Security  and Continuity Features Audit and Monitoring Section

Inventory of Information Assets

Novohit maintains the inventory of all data centers, data backup centers and operational instances. You can request a copy of the active inventory from the responsible person: MSc. Miguel Valderrama Weinmann, admin [@] novohit [.] com or by submitting a ticket at help.novohit.com, Administration Department.

Please consider that a Server has a life time when it has a better performance after that time it is more prone to fail. See On-Premises Server Lifetime.