Security & Reliability

Our architecture is built on top of Microsoft .NET security using security groups, access control, and group policies. All access to the Apex Payroll System requires the user to supply their credentials. Users are preauthorized and predefined to obtain access to our system. We require all user passwords to adhere to our security standards. Users can only log in from a single workstation and sessions are disconnected when idle for a predetermined time limit. Additionally, an individual user’s access can be limited to specific IP addresses and certain hours of particular days of the week.

Physical data is secured within our SQL Server database using security best practices. We take advantage of robust authentication features and encrypt all database connection strings. All access to data is limited to authorized personnel. Additionally when required, Personal Private Information (PPI) can be masked at the client level.

Our application uses a remote entry technology over HTTPS to establish a secure, encrypted connection between users on the Internet and internal network resources. This allows us to take advantage of Transport Layer Security (TLS) for increased security.  All data transmissions conducted through our applications are completed with 128-bit encryption to ensure the protection of your sensitive data.  Additionally all communication between our primary and secondary data centers is completed via Secure VPN.

High availability and redundancy are built into the system on every level. Our infrastructure is constantly monitored with specialized hardware, software, and team members to ensure availability. Backup procedures ensure applications, servers, client data, and even source code is backed every 15 minutes to our co-location facility. Additional copies of all backups are stored offsite with the assistance of a secured partner. Any hardware or software provided by our partners has service level agreements covering response times when assistance is required.

Access to datacenter locations requires prior authorization and is secured with biometric access controls. The facilities are under constant monitoring and the servers are contained within a locked security cage, which can only be accessed by select personnel. Even after entry to the cage, access to individual servers is limited by unique usernames and passwords.

Apex Payroll has extensive redundancy built into our systems to handle disaster recovery scenarios. Our secondary data center is in place, which is fully redundant and ready to go online with a flip of a switch. We developed our business continuity plans after we identified all system exposures / components and completed an extensive risk analysis. We regularly review our business continuity plans with our technology partners' support agreements to ensure they are current.

Network traffic is monitored by our enterprise level Cisco firewall along with additional managed firewall services.    We actively monitor network traffic with intrusion detection systems to prevent unauthorized access.  All servers are part of our private domain and require proper credentials to access.  We work directly with our technology partners to ensure our network is current with the latest software configurations and industry best practices.