This page details IMeasureU Ltd’s current backup and data recovery policy for the IMU Step platform. It specifically covers the cloud component of IMU Step. All captured data by IMU Step iOS, IMU Step Desktop or IMU BlueThunder/IMU BlueTrident Sensor is backed-up within the cloud version of IMU Step under the direct control of the hosted web server provider
1.0 Backup Policy Overview
IMeasureU Ltd holds and processes data on behalf of external organizations on a platform hosted by Amazon Web Services. Ensuring the security of this data is imperative and forms part of IMeasureU Ltd’s legal responsibility.
As customer data can be held in separate geographical regions governed by different data regulations, IMeasureU Ltd’s data management policy ensures that data does not leave it’s ‘parent’ regulatory data region in any form including system or data backups (even for Disaster Recovery or High Availability purposes), unless specifically agreed upon with the data owner. All data remains within a protected data management structure linked to the application or data purpose. IMeasureU ensures that data is not allowed to leave this virtual zone and that it remains separate and distinct.
All data remains within a protected data management structure linked to the application or data purpose. IMeasureU Ltd ensures that data is not allowed to leave this virtual zone and that it remains separate and distinct. To this purpose, data backups for individual databases will be processed and held as distinct entities. The data is held only within environments related to the application or application purpose.
To ensure data integrity and availability, IMeasureU Ltd has put in place policies and practices to protect the data.
1.1 Backup Media
Database Snapshots are encrypted at rest using an AES-256 encryption algorithm. Users can opt-in to separate Availability Zones to provide enhanced and more robust disaster recovery. Raw IMU data are stored within the AWS Simple Storage Service (S3) facilitating full data re-creation if the back-up Snapshot is corrupted, as well as providing re-processing capabilities if improvements are made to the proprietary algorithm.
1.2 Backup Schedules and Restore Policy
All servers and databases hosted in AWS that hold customer data will be backed up via daily Snapshots which have a retention period of up to 21 days. For servers that contain no customer data, these servers are easily replaced with a bootable virtual machine implemented using an Amazon Machine Image (AMI), and are excluded from backups.
IMeasureU Ltd has put in place protective policies and practices in order to confirm the integrity and availability of all backed-up data, including the implementation of quarterly data recovery exercises.
