Security | Orderful

Why You Can Count on Orderful’s Cloud EDI Security.

When we built Orderful Cloud EDI, we didn’t just focus on offering features that would make EDI transactions faster and easier. We built our platform from the ground up to offer the highest possible levels of security and reliability.

If your cloud EDI platform isn’t live, your business is dead. But as you evaluate potential cloud partners, you’re concerned about more than just uptime—you also need to make sure your most sensitive business data won’t fall into the wrong hands. We’re one step ahead of you. Orderful Cloud EDI leverages the most stringent security technologies. That’s why more and more of the world’s leading brands are trusting us with their EDI transactions.

EDI Security

We take every precaution to make sure your EDI data will go from Point A to Point B—but not Point C. Here’s what we’ll do to keep your business data safe from hackers and other online threats.

Application Security

Access to the Orderful platform is only permitted via SHA-256 SSL-secured connections
Individual Orderful platform accounts have independent access control features
Orderful platform account credentials follow best practices, including complexity requirements, hashing, and salting
Only TLS 1.2 and TLS 1.0 connections are supported
Data collected from respondents may be optionally auto-deleted after a configurable expiration window
Data exported from Orderful can be transmitted via secure HTTPS, SFTP, or FTPS protocols with configurable authentication credentials
A strict admin content security policy is in place

Database Security

All data is encrypted at rest
Robust AWS SSD hard drives offer redundant volume replication for data and file storage, with automatic alerts of potential failures
Weekly encrypted full backups
Daily encrypted differential backups of database and file systems
Backup retention policy includes secure destruction of expired backups
Automated checks ensure database integrity and index optimization
Parameterized queries and stored procedures protect against SQL injection attacks
All Orderful employees are bound by non-disclosure agreements that cover non-public customer information, and are trained on the sensitivity of such information
Background checks for Orderful and AWS employees

Data Center Security

Physical Security

Data centers staffed 24/7/365
Employee access is restricted to those who have business justification
Third-party access is further restricted and timebound
Two-factor authentication is required to gain access to server rooms and sensitive areas of the data center
Electronic intrusion detection systems are installed within the data layer to monitor, detect, and automatically alert the 24/7 AWS Security Operations Centers and teams
Closed circuit video surveillance is in use at all entrance points on the interior and exterior of the building that houses the data center facilities
AWS data centers maintain industry-recognized certifications and audits: PCI DSS Level 1, ISO 27001, FISMA Moderate, FedRAMP, HIPAA, and SOC 1 (formerly referred to as SAS 70 and/or SSAE 16) and SOC 2 audit reports
AWS is audited by external auditors on more than 2,600 requirements throughout the year
The Orderful platform is fully hosted in AWS data centers in the U.S.

Redundancy

Power

AWS data centers use mechanisms to control climate and maintain an appropriate operating temperature for servers and other hardware, preventing overheating and reducing the possibility of service outages
Personnel and systems monitor and control temperature and humidity at appropriate levels

Fire Detection and Suppression

AWS data centers are equipped with automatic fire detection and suppression equipment
Fire detection systems use smoke detection sensors within networking, mechanical, and infrastructure spaces

Leakage Detection

AWS equips data centers with functionality that can detect the presence of water from leaks
If water is detected, mechanisms are in place to remove water and prevent additional water damage

Network Uptime

AWS Network Redundancy

The Orderful platform is logically isolated at the network level in AWS into an Amazon Virtual Private Cloud where we can launch AWS resources in a virtual network that we define. Orderful has complete control over this virtual networking environment, including selection of our own IP address range, creation of subnets, and configuration of route tables and network gateways.
AWS has identified critical system components required to maintain the availability of the system and recover service in an outage. Critical system components are backed up across multiple, isolated locations known as Availability Zones. Each Availability Zone runs on its own physically distinct, independent infrastructure, and is engineered to be highly reliable. Availability Zones are connected to each other with fast, private fiber-optic networking, enabling you to easily architect applications that automatically fail-over between Availability Zones without interruption.
AWS Elastic Load Balancers are used to automatically distribute incoming application traffic across multiple Amazon EC2 instances in the cloud. This allows us to achieve greater levels of fault tolerance in the Orderful platform, seamlessly providing the required amount of load balancing capacity needed to distribute application traffic.
AWS CloudWatch allows us to collect monitoring and operational data in the form of logs, metrics, and events, providing Orderful Support and Engineering teams with a unified view of AWS resources, applications and services. CloudWatch is natively integrated with more than 70 AWS services and is integrated into our extended platform monitoring solution (including New Relic and PagerDuty). CloudWatch is leveraged to set high resolution alarms, visualize logs and metrics side by side, take automated actions, troubleshoot issues, and discover insights to optimize the Orderful platform, and to ensure they are running smoothly.
Firewalls, routers, switches, and internet backbone connections are all maintained with redundancy and high availability on a 24/7/52 basis by AWS
Redundant power is provided to all infrastructure routers and switches, as well as the data centers themselves
Redundant fiber connections are provided to Internet backbone connectivity providers
Advanced route optimization technology is used to provide efficient routing among the multiple backbone carriers connected to the data center
Servers are monitored on a real-time basis for availability via ICMP

Infrastructure

You can count on Orderful security because we use world-class AWS infrastructure and personnel to store and protect your data.

Network and Server Security

AWS firewall-equivalent Security Groups employed at every server to block all unused protocols
AWS Route Tables configured to restrict traffic, protocols, and ports between subnets
Databases logically segregated into a private network data tier that is not accessible from the internet, with ingress and egress traffic restricted by AWS Security Groups
Network and system monitoring provided by AWS CloudWatch Alarms, New Relic application and infrastructure monitoring, SumoLogic centralized log aggregation (with logs encrypted using AES-256 during transport and at rest), and incident alerting and triage using PagerDuty
Distributed-denial-of-service (DDoS) attack mitigation services available
Access to Orderful servers restricted to only an approved subset of Orderful’s engineering team via secure VPN connections
All system administrator access to Orderful servers logged to an audit trail
Anti-Virus Protection is used to scan servers for viruses and infected files are automatically quarantined

Server/Application Reliability

Dedicated fallback service paired with AWS Internet Gateways, AWS firewall-equivalent Security Groups, and AWS Elastic Load Balancers provides seamless HTTP/HTTPS redirects to customer-specific URL in the event of an interruption to the Orderful service
Database deployment on AWS RDS Managed Services helps to reduce operational overhead and risk by automating common activities such as change requests, monitoring, patch management, security, and backup services, and provides full-lifecycle services to provision, run, and support the infrastructure
Immediate alerts to Support teams and automated escalation to Engineering teams in the instance of any such fallback
New platform software releases go through a five-stage verification process: independent developer verification, QA server test, alpha test, beta test, and engineer-observed final production release
Hardware failures are replaced expeditiously using AWS native capabilities to spin up new servers or volumes in AWS on demand
Immediate server replacement available via AWS server and network infrastructure
AWS Enterprise Support team and specialized support teams for network, hardware, managed services, and general troubleshooting are standing by 24/7/365 for immediate detection and resolution of any such AWS infrastructure failures
Orderful alerting service on each server automatically notifies the Orderful engineering team in the event of system-level anomalies and exceptions
Centralized monitoring of all Orderful consoles via that is reviewed daily by Orderful’s engineering and implementation teams