Expert Reliability and Security Measures

Disaster recovery

Our team routinely runs through disaster recovery tests to verify projected recovery times and the integrity of your data.

Availability

• We use a Global CDN to ensure availability of resources in distributed regions
• We employ Elastic Scaling to ensure that performance and availability of the service is high
• We guarantee 99.5% availability.  Additional details can be found in our MSA.

Reliability

• All of our servers run on Amazon’s EC2, EKS and Fargate cloud services. The service runs within Amazon’s proven network infrastructure and data-centers. The Amazon Service Level Agreement commitment is 99.95% availability for each Amazon Region
• All file attachments are backed by the reliability of Amazon’s S3 storage service which is designed to provide 99.99% durability and 99.99% availability of objects over a given year
• All of our servers are monitored 24/7 to identify any outages. In the event of an outage, our internal operations team is immediately notified and is on-call to respond to such an event

Security

• All of our servers are firewalled to only allow access to necessary services
• We utilize modern configuration management software to ensure consistent configuration across our infrastructure
• All of our servers are updated regularly as part of our regular security audit procedures
• Comprehensive platform protection against all known and emergent site availability attacks and the application of best practices to mitigate known industry-wide security vulnerabilities.
  • Managed platform services and data stores are deployed in a zero-trust environment
  • HTTPS-only website and integration API access
  • Deployment of best practice HTTP security headers
  • Protection against:
    • Open Web Application Security Project (OWASP) top security risks
    • Latest emerging common vulnerabilities and exposures (CVE)
    • Cross-site scripting attacks
    • Cross-site request forgery attacks
    • Code and SQL injection attacks
    • Brute-force sign-in attacks

Data center certifications and accreditations

The data center, where Expert is hosted, has the following certifications and accreditations to ensure standards at a server level:

• SOC 1/SSAE 16/ISAE 3402
• FISMA Moderate
• PCI DSS Level 1
• ISO 27001
• International Traffic In Arms Compliance
• FIPS 140-2
• HIPAA

Secure access

With an included shared or optional custom domain, and TLS 1.1 / TLS 1.2 access, you can rest assured that any data being sent between your browser and the server is safe and secure.