Frequently asked questions regarding information security (ISO 27001)

This documents applies to EDIS website hosting and email services being offered in Austria. rev 1.0, 11/18/2022

Availability

EDIS does not guarantee a minimum percentage of availability, unless this is explicitly regulated within the framework of SLAs (Service Level Agreements) or contractually agreed.

The average availability of the services offered is > 99.9% over the last 3 years.

The average availability of energy, air conditioning, network and backbone is > 99.99% overthe last 3 years.

Type of transmission (information security)

The following secure protocols for encryption or for the protected transmission of information are available for use in the field of web and e-mail: HTTPS, SSL/TLS, FTPS or FTP over SSH (SFTP), SSH

Stored Data

is defined in the ADV* according to Art. 28 EU – DSGVO (GDPR)

on page 5 "Weitergabekontrolle"

Data storage periods

is defined in the ADV* according to Art. 28 EU – DSGVO (GDPR)

pages 5 and 6 "Wiederherstellbarkeit und Backup Policies"

Termination process upon cancellation of services

is defined in the ADV* according to Art. 28 EU – DSGVO (GDPR)

pages 5 and 6 "Wiederherstellbarkeit und Backup Policies"

Failover and Redundancy Solutions

Redundant power supply (A+B feeds), both feeds have redundant battery backups

Redundant air conditioning and early detection systems for smoke and fire, as well as red. extinguishing systems.

Multiple redundant Internet upstreams (Arelion, Hutchinson, Core Backbone, Voxility, GTT, ... AMSIX, VIX, peering CZ, ...)

Multiple redundant fiber optic backbone (DWDM) via different geographic routes.

Multiple redundant routers (InterXion and on-site)

Multiple redundant switching infrastructure

Multiple redundant connections of servers to switches (LACP)

Industrial servers on A+B electricity feeds

Switch clusters on A+B electricity feeds

Router on A+B electricity feeds and cold standby devices

Backup hardware in stock (cold and hot standby)

Backup: up to 40 daily incremental backups or snapshots

Certifications

Backbone/Hosting: Data center operator certified according to ISO27001 (information security)

Backbone/Routing: Data center operator certified according to ISO27001 and ISO22301 (Business Continuity).

*DSGVO (GDPR) ADV referenced above (agreement on order data processing according to Art. 28 EU – DSGVO/GDPR)

you can download on our website, from within the client portal or via this direct download link (document available in German language only).