CrashPlan addresses regulatory data security and privacy concerns by employing a multi-layered security model that includes transmission security, account security (access), password security, encryption security and secure messaging. CrashPlan PROe runs within the confines of a secure Java virtual machine. All cryptographic functions rely on the industry standard Cryptographic Extensions (JCE) provided therein.
We are also compliant with European Union Data Protection Directive (EUDPD) which states cloud backup providers are required to ensure all backed up data is only stored in Europe. CeeJay Software servers are all within Europe.
Password Security and Encryption
Your first line of defence is a password protected user interface; you can require that CrashPlan prompt you for a password every time the application is launched to prevent unauthorized access to your archived data and backup settings. The account password is never stored or transmitted in plain text.
The second line of defence appears before your data ever leaves your machine. Backup data is encrypted with a 448-bit data key before being transmitted. (Online banking sites use a 128-bit data key, the longer the key the more secure the encryption) Data remains encrypted once it reaches the destination and is never unencrypted until restored by you. Keys are created using a secure random number generated from Sun Microsystem’s Java Cryptography Extensions framework and are escrowed with your archive at each destination so you can restore your files should you lose your computer.
Secure Online Storage
In addition to the security measures built into CrashPlan software, backing up online to our online cloud destination, offers the added protection of a state-of-the-art data storage facility which has ISO 27001 certification. (http://en.wikipedia.org/wiki/ISO/IEC_27001) Your backup is stored in our our data centers located throughout Europe. All our data centers comply with data storage industry standards for secure physical access and up-to-date video surveillance. In addition, power and cooling redundancy guarantees very high availability and resiliency to failure. The facilities themselves protect CeeJay Software’s infrastructure from physical harm.
CeeJay Software or Code42 nor anyone else has access to your files, as they are encrypted using the password or security key you created when you first install CrashPlan.
To view the Code42 Terms and Conditions please visit