Sarbanes-Oxley

The Sarbanes-Oxley Act of 2002 (SOX) requires that businesses establish and document procedures for financial data retention.

Datapipe offers fully managed compliance solutions featuring Veritas Enterprise Vault compliance software in conjunction with NetApp SnapLock compliance.

With the introduction of the Sarbanes-Oxley Act (SOX), SAS 70 took on increased importance. SOX adopted the COSO model of controls, which is the same model that SAS 70 audits have used since inception. SOX heightened the focus placed on understanding the controls over financial reporting and identified a Type II SAS 70 report as the only acceptable method for a third party to assure a service organization's controls. Security "certifications" are excluded as acceptable substitutes for a Type II SAS 70 audit report. Audit Standard 5 (which replaced AS 2), available on the PCAOB's (www.pcaobus.org) website, details how a SAS 70 audit should be used in relation to SOX.

---

SnapLock Compliance

Enables organizations to satisfy strict records-retention regulations such as SEC Rule 17a-4 (broker-dealers), HIPAA (healthcare), Sarbanes-Oxley (public companies), 21CFR Part 11 (life sciences), and DOD 5015.2 (government). Only an act of willful destruction, such as physically removing disks from a NetApp system, can result in record deletion or alteration prior to the specified retention date.