Compliance
Document Security
Documents in the ProFundCom Library are stored in a database where they can be retrieved only by the ProFundCom system. Data is placed in the ProFundCom system only via the personalised and secure html links in the emails sent. This process ensures that documents are not exposed to web-crawlers or search engines such as Yahoo or Google.
Archiving
ProFundCom complies with the Securities and Exchange Commission (SEC) Rule 17a-4 which describes stringent rules that govern the storage of all electronic messages including email and instant messages for its members.
- ProFundCom stores all emails that have been sent out from the system in a special write-once table, where it remains locked for the SEC regulatory period of seven years. These transaction can be queried directly via the ProFundCom Interface to provide immediate regulatory bodies access.
- To comply with the regulation the index can be searched and used to retrieve records and all activity in the message store is monitored. This data can also be be made available to other corporate email archiving applications via our XML interface. Products we have integrated with are InterWoven, PlumbTree, Legato and FileNet using the PFC XML interface. If an email archiving system is already in place or if tight integration is not required all emails generated by ProFundCom can be bcc'ed to that account.
Identity management
All ProFundCom access is provided via a secure login that requires username and password authentication. Extensions to ProFundCom are also available that lock a login to a specified IP address or to a dynamically changing key.
Hosting Environment
ProFundCom servers are hosting at Rackspace and Star Networks for failover and redundancy objectives.
ProFundCom uses some of the most advanced technology for Internet security. When you access your ProFundCom server, your information is protected using both server authentication and data encryption, ensuring that your data is safe, secure, and available only to registered users in your organisation. Your data will be completely inaccessible to your competitors.
ProFundCom provides each user in your organisation with a unique user name and password that must be entered each time a user logs on. ProFundCom issues a session "cookie" only to record encrypted authentication information for the duration of a specific session. The session "cookie" does not include either the username or password of the user. ProFundCom.com does not use "cookies" to store other confidential user and session information, but instead implements more advanced security methods based on dynamic data and encoded session IDs.
In addition, ProFundCom is hosted in a secure server environment that uses a firewall and other advanced technology to prevent interference or access from outside intruders.
SAS90 and ISO9001
ProFundCom, the leading hedge fund and asset management intelligence platform, has become an ISO 9001:2008 compliant organization in addition to being a SAS90 certified organisation. The certification is accredited by the United Kingdom Accreditation Service (UKAS).
The certification of compliance with ISO 9001:2008 recognizes that ProFundCom's policies, practices and procedures ensure consistent quality in the services and product provided to customers.
