We are HIPAA Compliant.

HIPAA legislates the security of electronically protected health information to be implemented by health plans, health care clearinghouses, and certain health care providers. It describes the adoption of national standards for safeguards to protect the confidentiality, integrity, and availability of electronically protected health information. The security rule of HIPAA requires that covered entities have appropriate Administrative Procedures, Physical Safeguards, and Technical Safeguards to protect access to protected health information. Compliance with the security rule will be required by April 21, 2005. Service from an offsite backup service provider such as us is an excellent way to fulfill HIPAA legislation and become compliant.

Encryption:

Our system supports AES, 3DES and Two Fish encryption algorithms to protect your data.

As of 2005, no successful attacks against AES have been recognized. The National Security Agency (NSA) reviewed all the AES finalists, including Rijndael, and stated that all of them were secure enough for US Government non-classified data. In June 2003, the US Government announced that AES may be used for classified information:

"The design and strength of all key lengths of the AES algorithm (i.e., 128, 192 and 256) are sufficient to protect classified information up to the SECRET level. TOP SECRET information will require use of either the 192 or 256 key lengths. The implementation of AES in products intended to protect national security systems and/or information must be reviewed and certified by NSA prior to their acquisition and use."

This marks the first time that the public has had access to a cipher approved by NSA for TOP SECRET information. It is interesting to note that many public products use 128-bit secret keys by default; it is possible that NSA suspects a fundamental weakness in keys this short, or they may simply prefer a safety margin for top secret documents (which may require security decades into the future). “

Warning:
You will NOT be able to restore any data without the user passphrase (login name and password) and Florida Remote Backup Service will not be able to recover the passphrase if it is lost.  We strongly recommend that our customers securely store this information offsite in at least two locations.