Enveloc's offsite data backup solutions provide powerful and cost-effective ways to satisfy a broad range of today's mandatory compliance issues involving the storage and security of client records and data.


Compliant with regulatory mandates like HIPAA, Sarbanes-Oxley, Graham-Leach Bliley, and FINRA & SEC requirements, Enveloc allows you to reduce IT expenses and get rid of difficult and unreliable tape backups by backing up your critical data to our secure, offsite and geographically distinct data centers.


Enveloc automatically protects your critical and confidential data by providing secure storage and restoration that eliminates the threat of human error, natural disaster or mechanical or software failure. Fully automated and encrypted with 256-bit AES encryption for uncompromised security, Enveloc offers a number of critical data storage benefits to ensure your data is safe, secure and regulatory compliant.


The Health Insurance Portability and Accountability Act of 1996 (HIPAA) impacts virtually every health-related organization in the U.S., including all health care providers (even one-physician offices), health plans, employers, public health authorities, hospitals, life insurers, clearinghouses, billing agencies, information systems vendors, service organizations, and universities. Part of this act is focused on the secure transmission and storage of confidential patient data. Non-compliance with these regulations can mean both civil and criminal penalties. To be HIPAA compliant, organizations must provide reasonable and appropriate administrative, technical, and physical safeguards to ensure integrity, confidentiality, and availability of patient information.

Under HIPAA, organizations must provide security and privacy for personal health information to guard against reasonably anticipated threats or hazards, both in transit and during storage. Physical safeguards and technical measures to protect patient information must also be in place as well. Rather than spending huge sums of money to bring their own IT departments within HIPAA compliance, users can utilize Enveloc to provide an economically feasible data security and storage solution without compromising patient privacy.

With Enveloc, patient data is secured using 256-bit AES encryption before it is transmitted to our servers residing at our secure class A Network Operation Centers. Physical access is strictly controlled through administrative procedures, physical safeguards, and technical security measures to prevent unauthorized use or disclosure of customer data. Access to data requires that designated personnel provide an authorized encryption passphrase (not even Enveloc has a copy), making unauthorized access virtually impossible.

HIPAA also mandates that healthcare providers retain electronic patient records for a minimum of 6 years and strictly forbids unauthorized access to individually identifiable health records. To accommodate, Enveloc provides a cost effective way to store patient data indefinitely in secured facilities, in encrypted lossless compression.

Enveloc features daily automatic backups scheduled by the user and backups can be restored to any location, 24/7. Our 'Always Live', US-based customer service is available around the clock and daily backup audits and confirmation e-mails with summary transfer logs ensure the integrity of every single data backup set to provide a clear audit trail, if necessary.


The Securities and Exchange Commission (SEC) and the National Association of Securities Dealers (NASD) have instituted mandatory compliance rules and regulations affecting the storage of financial records by any financial institution or advisory groups dealing with securities.

The Financial Industry Regulatory Authority (FINRA) is the non-profit organization designed to regulate securities firms and stockbrokers to ensure that customer, market and transaction data remians private, secure and continuously available.

Enveloc offers a cost effective way for firms to reduce downtime, minimize the risk of data loss and satisfy FINRA compliance issues. Enveloc’s comprehensive backup solutions provide a secure, offsite data storage facility to meet these strict government regulations and comply with increasingly stringent audit requirements.

By taking the cost and complexity out of data protection and regulatory compliance, Enveloc provides financial service firms peace of mind and better service levels. That's why thousands of customers worldwide rely on Enveloc as a trusted protector of their data. More importantly, we share your expectations for service quality. Backed by an experienced service team that appreciates the importance of the security of your clients’ data, Enveloc is an easy solution for a complicated issue.

Enveloc enables clients to comply with these regulations by providing the following data storage and security measures. Enveloc’s secure, offsite backup solutions offer these critical compliance features:
  • Automatic verification of the the quality and accuracy of the data set every time a backup takes place.
  • Backup data is encrypted using 256-bit AES encryption before transmission and is always maintained in encrypted state until restored to client servers.
  • Data access is restricted to authorized personnel with a self-created encryption passphrase only known to the user (not even Enveloc has a copy.)
  • Fully automated backups scheduled by the user and daily verification and notification that every backup has completed successfully.
  • Data is stored offsite in redundant, high security class-A data Network Operation Centers and data can be restored to any location, 24/7.
  • Our "Always Live," US-based customer service is available around the clock and daily backup audits and confirmation e-mails with summary transfer logs ensure the integrity of every single data backup set to provide a clear audit trail if necessary.


Due to additional storage required to comply, a 50% surcharge will be applied. Please contact us for details.


The Sarbanes-Oxley (SOX) Act of 2002 legislates the manner and duration in which certain financial institutions’ data are secured and stored . The act places rigorous requirements on the security, accuracy and reliability of certain records. As a result, data security and storage becomes vitally important because the records of transactions must be secure. The Corporate and Criminal Fraud Accountability aspects of SOX require a broad range of corporate documents be retained for five years and failure to produce certain documents during an audit is subject to severe penalties.

SOX mandates that subject matter data be continuously available 24/7 for a period of five years. However, hoping your server does not crash for five years is obviously not a choice. Making matters more complex, conventional solutions like storage tapes are prohibitively expensive, unreliable and require the implementation and maintenance of complex hardware systems. Tapes also lack effective data encryption to prevent unauthorized access to the media and there are also concerns about the cost and sufficiency for the actual the physical storage of the tapes themselves.

Enveloc provides a cost effective alternative: secure, automated offsite backup services that helps with SOX compliance without elaborate storage procedures or outrageous IT budgets.

Enveloc’s online data backup solutions offer the following safeguards to ensure quality control:

  • Backup data is encrypted using 256-bit AES encryption before transmission and remains encrypted in lossless compression at Enveloc’s redundant data centers until restored to client servers.
  • Stored information can only be retrieved by authorized using a user-defined encryption passphrase. (Not even Enveloc has a copy).
  • Fully automated backups are scheduled by the user, maintained in a discernable sequence, verified daily and notifications are provided to ensure every backup has completed successfully.
  • Data can be stored on Enveloc’s secure servers indefinitely. Retention periods are configured by users during initial set up; after that, backups are automatically stored for that period and can be deleted automatically after the period stated in the Act (generally, five years).
  • Data is stored offsite on redundant, high security class-A data Network Operation Centers, is available 24/7 and can be restored instantly to any location.
  • Enveloc’s live, US-based customer service is available around the clock and daily backup audits and confirmation e-mails with summary transfer logs can be provided to ensure the integrity of every single data backup set to provide a clear audit trail, if necessary.
  • Enveloc logs data access each time a user restores any stored backup data.