MyGov Security Information
SSL Encryption
MyGov encrypts all sensitive information being passed over the Internet using 128/256 Bit Strong SSL Encryption and a Validation Method of High Assurance. The secure encryption and identity insurance is provided by Digicert, an independent SSL Certificate Authority.
Servers / OS
MyGov uses RackSpace Cloud servers running CentOS Linux (based on RedHat). Servers feature rapid scaling, redundant hardware architecture, Xen hypervisor, RAID 10 storage, reserved RAM and CPU bursting. Servers are clustered with load balancers and replication for high capacity and reliablity.
Secure Facility
MyGov collocates all servers to Rackspace, a managed hosting company. MyGov uses their RackWatch Platinum service, which provides 24x7x365 system monitoring on their Zero-Downtime Network. RackWatch maintains premier Data Centers with exacting security protocols and redundancies.
Monitoring Services
MyGov servers and services are monitored 24x7x365 through a dedicated enterprise monitoring console. Additionally, Site24x7 provides third party monitoring which validates Customer uptime and provides an independent validation for the MyGov Service Level Agreement (SLA).
Backups
MyGov utilizes an independent off-site backup service to maintain at least seven days of backups for each Customer.
PCI Compliance
For online payments using credit / debit cards and eChecks, MyGov uses Century Bankcard Services which maintains PCI Compliance validated by Visa.
Data Ownership / Retrieval
All paying Customers utilizing the MyGov Services, as defined in the Terms of Use, retain an ownership right to their data and can request a complete copy of their Database in its native DB format. Upon request, MyGov will make the data available to the Customer within seven business days.
