Secure Hosted Online Testing

Technical and Organisational Security Measures

Overview

To ensure maximum uptime and reliability, ClassMarker uses redundant load-balanced servers, failover techniques, and multiple backups.

Additionally, ClassMarker is monitored by our engineers 24 hours a day, 7 days a week, so you can be assured your tests will be available exactly when you need them.

ClassMarker is also GDPR, CCPA and NY Ed Compliant. You can Contact Us for a Data Protection Agreement.

Web Traffic

All traffic is encrypted with HTTPS TLS 1.2 or greater
Firewall (ConfigServer Firewall)

Secure Data Center

ClassMarker.com is hosted www.liquidweb.com

Liquid web provide:

On-site security highlighted by motion-detecting CCTV security cameras monitoring the entirety of their data centers, man traps, employee-only access, 24/7 manned security, the latest security system controls as well as reinforced poured concrete walls
SSAE-16 & HIPAA Compliance
Redundant networks, cooling and powe
Tier-1 Premium Bandwidth
Uninterruptible Power Systems
24/7 Level 3 Technicians On-site

Availability

ClassMarker uses a High availability load balanced hosting solution
Separate web servers and database servers within private network

Account access controls

Strong password policies enforced
Account lockout policies enforced
Multi-Factor Authentication available
Accounts passwords stored salted and hashed

Server Access controls

Only authorised ClassMarker staff have Hosted environment access and authorised LiquidWeb.com staff as required
VPN and SSH are required for accessing ClassMarker Hosted environments.
SSH access limited to VPN access
Strong passwords are enforced

Server Software Updates

Security updates and patches are applied regularly

Backups

Data is stored securely and encrypted-at-rest offsite using AES-256 for disaster recovery purposes
Data backups are taken multiple times per day on 30 day rotations

Disaster recovery

ClassMarker has staff on call 24/7 for Disaster Recovery procedures