Outsourced e-mail archive service provider Fortiva knew encrypting sensitive Microsoft Exchange e-mails was critical to building customer trust. According to CEO Paul Chen, Fortiva allows customers to make specific messages candidates for archival, via the Microsoft Exchange Journaling function. Messages then are transmitted from the Journaling in-box to Fortiva.
Fortiva's application uses what it calls DoubleBlind encryption with a Fortiva encryption appliance, which means the customer retains its own encryption key behind its firewall . Before the data is transmitted to Fortiva, it passes through the encryption appliance where it is automatically encrypted. Messages then are stored at Fortiva in encrypted form, and are unencrypted only when an authorized user conducts a search or discovery using the Web interface.
Fortiva customer First Associates Investments in Toronto handles sensitive data about future company mergers and acquisitions. According to Brian Erdelyi, information security officer, First Associates signed up with Fortiva to help it comply with regulations about e-mail message retention and maintaining proper supervisory control. A deciding factor in the move, he says, was Fortiva's ability to encrypt the data."That was one of the biggest differences Fortiva offered compared to other outsourcing providers," he says, noting that the encryption process did not affect Exchange performance.
Companies that entrust their data to outsourced providers should expect them to deliver a higher standard of security , including encryption, Chen says. "Clients should demand more from their service providers. Data encryption at rest is the necessary step when dealing with data security," he says.