Advanced Data Center & Security
Lighthouse maintains a secure facility at our corporate headquarters, and has a SAS 70, Type II certified data center — the highest possible security and scalability rankings — at Fisher Plaza in Seattle, Washington. We have 100 terabytes of storage capacity, and we follow strict security protocols that have been vetted by several Fortune 10 corporations. Our systems provide multiple layers of security, protecting against intrusions and maintaining structural and environmental controls.
View an Interactive Overview of Our Technology Infrastructure.
Physical Security
Lighthouse’s data center features the most sophisticated physical security: fingerprint and key card access controls, video monitoring, and 24-hour security patrols; dual power feeds and a dedicated backup power system; the most highly-scalable bandwidth; fire detection and suppression systems; and sophisticated environmental controls, including a dedicated HVAC chilled-water cooling system and real-time temperature monitoring. Physical inventory is maintained in a locked facility with fire-proof safes, and all physical media is tracked with inventory bar codes. At Lighthouse’s offices in a Class A building in downtown Seattle, video monitoring and key card access provide security to any data in the Lighthouse premises. The entire office building is manned by security personnel 24-hours a day. During business hours, Lighthouse’s offices have a single guest entrance which is monitored by a receptionist. Guests must sign in and be escorted at all times by authorized employees. After business hours, the entire building is secured with video monitoring and key card access, and additional key card access restrictions and controls affect the Lighthouse premises.
Network Security
Lighthouse employs strict network access controls, including user-based authentication, password policies, and group/role-based access controls. All user accounts require mandatory password rotation. A strict firewall protects access at the network’s edge, active anti-virus protection is in place on all processing systems, and Lighthouse conducts regular external vulnerability scans. All production systems are actively monitored for up-time and availability 24/7/365. Finally, security and update patches are routinely deployed to all systems.
Data Security
Lighthouse can support any type of data encryption or decryption, and can transport data using Public Key Encryption via FTP, FTPS, or SFTP. Lighthouse has multi-layer systems in place to secure and backup a client’s data. Access to data for processing is restricted based on function and role, and data retention and destruction is handled based on the client’s direction. Examples of reportable security incidents include suspected virus or worm infections and local account compromise. Lighthouse is Safe Harbor Compliant.
Processes and Controls
Lighthouse uses industry-leading software and best practices to process and produce data. Lighthouse consults with the client at the outset of a project to learn their particular security requirements and expectations, and employs formal chain-of-custody logging to ensure defensibility. An internal Change Review Board approves all software, hardware, and configuration changes to production environments, and all employees must pass a comprehensive background check. Lighthouse has a detailed security incident response plan in place to respond to incidents such as suspected virus or worm infections, violations of company computer security policies and standards, physical or logical damage to systems, or the presence of unexpected programs or files.
Secure Review Platforms
Hosted review often requires access for corporate clients, their outside counsel, and an outsourced managed review firm. Such varied access necessitates advanced security measures. In addition to the security referenced above, Lighthouse uses review platforms that feature a highly granular security architecture, highly secure user log-in, and public/private folders to ensure exclusive access to our clients.
Lighthouse has the most advanced data security systems and processes in the industry, as vetted by several Fortune 10 companies with multi-billion dollar litigation matters. Moreover, Lighthouse’s infrastructure is highly scalable and flexible to meet any customer’s unique requirements.