How we protect you
At Sage we have strict policies and control frameworks in place to ensure your data is secure and that you have continuity of service.
Policies and control frameworks
The policies and frameworks cover the following areas:
- Information security policies
- Organisation of information security
- Human resources security
- Asset management
- Access control
- Physical and environmental security
- Operations security
- Communications security
- System acquisition, development and maintenance
- Supplier relationships
- Information security incident management
- Information security aspects of business continuity management
Sage Online Services is hosted in a highly secure environment managed by Amazon Web Services (AWS) in their data centres. We've assessed the measures in place on AWS and we're satisfied they meet the requirements of our own policies and control frameworks. AWS also holds ISO/IEC 27001 and ISO/IEC 27018 certifications, which cover the data centres and services used by Sage Online Services. So you can be confident your data and your employees' information is both safe and secure.
EU data protection
We've specified that your Sage Online Services data is held in EU based AWS data centres. In the unlikely event that your data is transferred to the USA, AWS has obtained approval from EU data protection authorities, known as the Article 29 Working Party, that their Standard Contractual Clauses enable a data controller to transfer personal data in a compliant way to a data centre outside the EU, including USA. We've entered into these Standard Contractual Clauses with AWS as data processor for the Sage Online Services. This means that your data will remain secure both during and after the transfer.
Benefits for your employees above and beyond their payslips
We want to help your business where we can. That's why we are offering Sage Employee Benefits free to Sage customers for the first three months.