SECURITY

Secure to the extreme.

Geoforce takes the security of your data very seriously and goes to extreme measures to ensure that it is never compromised. In fact, Geoforce takes security so seriously that we've been invited to present our best practices at SecureWorld Expo several times in the last few years.

Quarterly Security Scans

It's one thing to say you're secure, it's another thing to prove it. Geoforce runs commonly used hacker tools against our application on a quarterly basis in an effort to discover issues before a problem arises. We have successfully passed security audits run by several major international oil companies, including Schlumberger and BP.

Separate Environments with Restricted Access

Geoforce follows the industry best practice of using separate development, test and production environments. Furthermore, access to each environment is restricted to a "need-to-know" basis.

Ensuring Authentic Connections

Geoforce takes measures to prevent "spoofing" attacks. We make use of a 256-bit Extended Verification SSL certificate, obtainable only through more rigorous website ownership verification processes. This provides you with a green-bar validation that you are at the right place, not to mention having outstanding levels of data encryption. Geoforce also ensures the authenticity of emails sent to you through the use of "SPF" records and "DKIM" cryptographic signatures from the Geoforce.com domain.

Multi-Tiered Architecture

Geoforce uses a multi-tiered architecture, meaning it uses multiple servers that each performs a dedicated task. In addition to providing excellent scalability, this architecture allows each server's security settings to be finely tuned to that server's specific purpose. Ultimately, this provides multiple layers of security that a hacker would need to compromise, and provides fewer points of entry on individual servers on which a hacker could gain access.

Layered Monitoring of Software and Hardware

Geoforce employs the use of multiple, layered and redundant monitoring of our various software and hardware components. Several monitoring agents offer Geoforce instant visibility into any impending issues that may arise. Additionally, our managed service provider also monitors our servers for basic uptime, as well as all hardware level monitoring.

SAS-70 - Type II Compliant Hosting

Geoforce's application servers are hosted at an SAS-70 compliant data center. Data center access is limited to data center technicians and requires biometric scanning for entry. Security cameras monitor all locations, and 24/7 onsite staff provides additional protection against unauthorized entry. All facilities are unmarked to help maintain a low profile.