Cloud Security

The cloud-hosted products offered by BeyondTrust are hosted in a third-party data center, specifically Microsoft Azure and Amazon Web Services (AWS), for host customer instances. These providers and their respective regions are configured to provide our customers with redundancy options and to support disaster recovery functions; disaster recovery testing is performed on a scheduled basis to ensure that our commitments and objectives are upheld. All hosting locations are geographically dispersed to account for potential environmental issues that could impact the cloud service.

All data centers used to support BeyondTrust’s cloud environment have achieved certifications such as ISO/IEC 27001, ISO/IEC 27018, and others to demonstrate their commitment to ensuring confidentiality, integrity, and availability. Additionally, all data centers have completed rigorous audits such as SOC 2 Type II and others. More information about our cloud hosts can be found using the links below.

AWS Compliance Program

AWS Data Center Controls

Microsoft Azure Compliance Program

Microsoft Azure Data Center Controls

Additional information regarding BeyondTrust cloud environments for each product can be found using the resources below.

Remote Support

Privileged Remote Access

Endpoint Privilege Management

Password Safe

A formal Business Continuity (BC) and Disaster Recovery (DR) plan is implemented for the corporate and cloud environment(s) as well as other defined categories related to personnel and environmental disasters. The plans are aligned to ISO 22301, certified and audited under ISO 27001, SOC 2 Type II, reviewed by management, tested annually, and approved by BeyondTrust's Executive Leadership Team.

BeyondTrust conducts tests of both plans that focus solely on our organization’s ability to continue our daily operations. Scenarios have been developed for testing to ensure that our teams have considered various threats and situations when attempting to restore services within the cloud. Such scenarios include the team creating a cloud instance and intentionally rendering the service inoperable. This allows for various methodologies to be tested such as redeploying an instance, implementing the last known good backup within the service, and performing regional failovers. All DR testing performed by BeyondTrust is conducted through virtualization to avoid impacting our customer's daily operations and the service.

To minimize the effects of a disaster within the cloud, BeyondTrust utilizes replication and mirroring capabilities as well as geo-redundant storage to account for a data center failure. These utilities are automatically enabled upon the creation of a customer’s instance in BeyondTrust’s cloud environment.

BeyondTrust is committed to ensuring high availability for our customers, as outlined in our Cloud Security Guide. Our cloud hosted environments on Amazon Web Services and Microsoft Azure have an uptime SLA of 99.9% which has been consistently exceeded year over year. However, recovery time and recovery point objectives may vary depending on the nature of the incident and the specific situation.