One key thing to note about our DCF tool is that it does not index an estate for hardware or software itself, instead, it connects to well established inventory tools and collects the data from those discovery agents. This is to say, the DCF is only concerned with the collection of data, rather than discovery. Customers can be assured that our collection, transfer, and storage of data is always undertaken using the most stringent security protocols while adhering to industry standard security and encryption practices.
For the data transfer, the DCF uses SFTP public key authentication to ensure that all data is transferred and encrypted/decrypted securely. For this, a pair of public and private key files are generated with only the public key disclosed to Livingstone: placing full control of customer data with the customer. The technology behind these keys is OpenSSH RSA 2048-bit asymmetric encryption, which is an industry standard.
For storage, any data that is received by the SFTP server is at rest on an encrypted storage drive using AES 256 encryption, which, again, is industry standard. We have additional processes in place to ensure that this data can only be accessed on the SFTP server by authorized Livingstone personnel, IT administrators, or automated processes that move the data off the SFTP server to be processed by Livingstone's Hub. Some of our international clients have additional security requirements which state that their data is to not leave the country of origin. For these clients, Livingstone maintain a number of international SFTP servers and instances of Hub though Amazon Web Services.
Our data handling practices have been certified secure by ISO27001. Please click here for more details.