Data Encryption
Offsite SAN utilizes the industry's strongest and fastest encryption algorithm for the ultimate in data security and protection. Blowfish is a symmetric block cipher accepting a variable-length key up to 448 bits, making it ideal for both domestic and exportable use. Since it's initial release in 1993, the Blowfish code has never been cracked. In fact, a 448-bit Blowfish encryption key would take 2.1x1096 BILLION powerful computers, each capable of trying one BILLION keys per second to try every possible combination of bits in a 448-bit key. In other words, your data is ultra-secure with Offsite SAN.

Encryption Key
Each time the client software is installed, a random, unique encryption key is generated. This key is automatically loaded into the backup program and used to backup or restore your data from the offsite storage vault.

At installation time, you MUST record the value of this encryption key and store it in a safe place. You alone are responsible for securing and keeping your key private. As this key is completely random, Offsite SAN personnel do not know your encryption key value. If for any reason you need to reinstall the backup client software to recover data, you will need this key.

Remember, your password is NOT your encryption key!

Without the encryption key, nobody can access your information - not even the employees of Offsite SAN. This provides you with assurance that your data cannot be read by unauthorized personnel.

Network Protection
The Offsite SAN data vault is a network of purpose-built servers. Each server performs only one function - securing your data.

Features include:

• Diverse Internet backbone connections with fail-over
• Server redundancy with built-in fail-over
• Expandable fault-tolerant storage arrays
• Second mirrored data center for backup redundancy
• Monitored 24x7x365
• Secure firewalls
• Environmental protection warning systems
• Owned (non-shared) secure facilities
• Uninterruptible power supplies and emergency power generation

Sophisticated network port blocking and packet filtering techniques are used to prevent unauthorized access to the server. All failed attempts to access the server are logged and reviewed by the system administrator. Remote administration of the server is performed using remote terminal software over an encrypted management link.

End users do NOT have an operating system account on the server and can perform no tasks other than backup and restoration of encrypted data files.