Your accounting data is some of the most sensitive information your firm handles, so security is built into every hosted environment, not added on request. This page explains what protects your QuickBooks and tax software on a Cloud Innovics server, where the servers are, and what remains your job.

The Protections on Every Plan

• Encryption. Data is protected with 256-bit AES encryption, and connections use TLS, so files are protected both while they travel and while they are stored.
• Multi-factor authentication. A second verification step adds protection against stolen or guessed passwords.
• Encrypted remote desktop. You reach your software through encrypted Remote Desktop sessions, so you can work from any device without exposing the data on it.
• Firewalls. Firewalls inspect incoming and outgoing traffic and block malicious connections.
• 24/7 monitoring. Servers are watched around the clock, and our support team sits on top of that monitoring.
• Daily backups. Automatic daily backups are included on every plan. How Daily Backups Work has the details.

Where Your Data Lives

Our infrastructure runs in independently audited, Tier IV data centers in three U.S. locations. Phoenix, Arizona is the primary facility, with Ashburn, Virginia and Atlanta, Georgia providing geographic redundancy. The facilities have redundant power and cooling, restricted and monitored physical access, round-the-clock facility security, and redundant network carriers. There is no walk-up access to the hardware.

Certifications, Explained Plainly

Cloud Innovics holds SOC 2 Type 2 directly. That is an independent audit of our own security controls. The facilities our servers run in separately maintain ISO 27001, PCI DSS and SOC 1 and SOC 2 audits, and meet HIPAA-ready standards. Those apply at the facility level, which means they describe the building and the network around our servers, not Cloud Innovics itself. Our data centers page lists the details.

Uptime

Every plan carries a 99.9% uptime commitment, which works out to roughly 8.76 hours of downtime in a year, backed by 24/7 server monitoring. The Service Level Agreement sets out exactly how uptime is measured and what is excluded, such as scheduled maintenance.

What You Still Control

Good hosting security does not replace good habits on your side. These matter most:

• Use a strong, unique password for every user, and turn on multi-factor authentication where it is offered.
• Tell support when someone leaves your firm so their access is removed promptly.
• Keep the computers and phones you connect from up to date and protected.
• Do not share logins between staff. Ask support to add a user instead.

Questions About Security or Compliance?

If your firm has specific security or compliance questions, contact our support team or call 1-800-661-5186. For the wider picture, see Is QuickBooks Hosting Secure? and, for tax firms, FTC Safeguards Rule: When Your Firm Must Report a Data Breach.

Related: How Daily Backups Work