1

What infrastructure is used for hosting the application and the website?

TimeSolv leases redundant servers with automated failover firewall technology.  Application Servers are hosted at www.liquidweb.com complying with:

• SSAE-16 (formerly SAS70) Compliant, see http://www.liquidweb.com/datacenter/ssae16.html
• See https://cert.webtrust.org/stage/pdfs/soc3_liquid_web.pdf  for security assessment by third party.

For redundancy, the public facing website is hosted with http://mediatemple.net/, a high availability hosting provider utilizing Grid Computing.

For additional redundancy, TimeSolv’s Blog is hosted with http://www.hostmonster.com/ . This hosting provider can also be used as a backup if Media Temple becomes unavailable.

2

Is TimeSolv PCI (Payment Card Industry Data Security Standard) compliant?

TimeSolv is PCI compliant with security audit and compliance certified by SecurityMetrics, https://securitymetrics.com .

3

What mechanisms are in place to ensure that only authorized personnel will be able to access your data?

All passwords are encrypted and TimeSolv employees do not have access to passwords to access production data.

Data center access is strictly limited to technical staff. Electronic security systems control data center access and are accompanied by a full complement of motion detecting security cameras which monitor the entire facility. Data Center facility external walls are reinforced poured concrete. Data centers are a fully managed facility, which means we have level 3 technicians on site 24 hours per day.

4

Does the contract address confidentiality?

Yes, the customer contract includes terms of service agreement addressing confidentiality of customers’ information. See TimeSolv’s Privacy Statement at http://timesolv.com/privacy.html

5

How frequently are back-ups performed?

Onsite backups are performed in near real-time with maximum delay of 5 minutes on a redundant database server.  Offsite backup are performed automatically every day with Amazon.com on the west coast.  In addition, TimeSolv provides automated daily backup via the Automatic Data Export services.

6

Is data backed up to more than one server? Where are the respective servers located? Will data always stay within the boundaries of the United States?

Onsite backups are performed in near real-time at the data center with maximum delay of 5 minutes on a redundant database server.  Offsite backup are performed automatically every day with Amazon.com on the west coast.

All data is kept within the United States.

7

How secure are the data centers where the servers are housed?

Data center access is strictly limited to technical staff. Electronic security systems control data center access and are accompanied by a full complement of motion detecting security cameras which monitor the entire facility.  Data Center facility external walls are reinforced poured concrete.

8

What types of encryption methods are used and how are passwords stored? Is your data encrypted while in transit or only when in storage?

128 bit SSL for all data transmission and password storage.  Data is encrypted while in transit.

9

Are there redundant power supplies for the servers?

Data Center power systems feature extensive fault tolerance and resilience at every layer. Incoming service is routed underground to a dedicated on-site transformer. This system routes to our automatic transfer switch which monitors power quality, and automatically transfers to our emergency generators in the event they are needed. Each facility is also protected by one or more uninterruptible Power Supplies (UPS), featuring redundant battery cabinets and full maintenance bypass cabinets allowing for service and upgrades without interruption of power to our servers.

Liebert Precision power distribution units handle final power transformation and distribution to racks, ensuring clean consistent power to data center equipment.

Each facility has multiple emergency generators waiting on standby, featuring over 24 hours of autonomous runtime before requiring refueling. Each generator is test run at least once a week to ensure they are ready in the event they are needed.

Generator power is activated automatically in the event of a utility failure by the transfer switch. The data center load is maintained by the UPS units with at least 15 minutes of capacity, however this is not necessary as the generator is active and up to speed within 10 seconds of a power failure.

10

Does the contract include a guarantee of uptime? How much uptime?

TimeSolv is open to signing a guaranteed uptime and compensation due to unexpected period of downtime.  TimeSolv’s historical uptime exceeds 99.95%.

11

If a natural disaster strikes one geographic region, would all data be lost? Are there geo-redundant backups?

• Offsite backup are performed automatically every day with Amazon.com on the west coast.
• Client can also receive copy of their data in CSV (Comma Separated Values) format via Automatic Data Export service at $19.95/month every day to backs up on their own servers

12

If there is a data breach, will you be notified?

TimeSolv has not experienced a data breach.  Customers will be notified in case of data breach.

13

What rights do you have upon termination?

TimeSolv does not hold hostage any of client’s data.  All data is available for download with a built-in option as CSV files.  TimeSolv is open to providing a contract with specific service levels to meet client’s needs.

14

Can we back up data locally?

Each client can back up their data as a compressed file with an included data download utility.  TimeSolv doesn’t hold data hostage to resolve billing disputes.  Client can also receive copy of their data in CSV (Comma Separated Values) format via Automatic Data Export service at $19.95/month every day to backs up on their own servers.