The following U.S. IBXs are SSAE16 SOC-1 Type II certified:

Transcription

1 The following U.S. IBXs are SSAE16 SOC-1 Type II certified: Metro IBX IBX Class City Address Atlanta AT1 Atlanta 180 Peachtree Boston BO1 Boston Waltham 74 West Street Chicago CH1 Chicago 350 East Cermak 5th Floor CH2 Chicago 350 East Cermak 6th Floor CH3 Elk Grove 1905 Lunt Avenue CH4* Chicago 350 East Cermak Road 8th Floor Cleveland CL1 Cleveland 1255 Euclid Ave Dallas DA1 Dallas 1950 North Stemmons Freeway Suite 1034 (Infomart) DA2 Plan for North Stemmons Freeway (Infomart) DA3 Dallas 1950 North Stemmons Freeway Suite 1039 & 2048 (Infomart) Denver DE1 Denver 9706 East Easter Avenue Los Angeles LA1 Los Angeles 600 West 7th Street 6th Floor LA2 Los Angeles 818 West 7th Street LA3 El Segundo 1920 East Maple Avenue LA4 El Segundo 445 North Douglas Street New York NY1 Newark, NJ 165 Halsey Street NY2 Secaucus, NJ 275 Hartz Way NY4 Secaucus, NJ 755 Secaucus Road NY7 New Jersey North Bergen 5851 Westside Avenue NY10 New York City 65 Broadway 3rd Floor Philadelphia PH2 Philadelphia 3701 Market Street Pittsburgh PI1 Pittsburgh 100 South Commons Allegheny Center Mall, Suite 126 Seattle SE2 Seattle 2001 Sixth Avenue Westin Bldg, 12th Floor Silicon Valley SV1 San Jose South 11 Great Oaks Blvd SV2 Santa Clara 1350 Duane Avenue SV3 San Jose North 1735 Lundy Avenue SV4 Sunnyvale 255 Caspian Drive SV5 San Jose South 9 Great Oaks Blvd SV6 Sunnyvale 444 Toyama Drive SV7 San Jose South 534 Stockton Avenue SV8 Palo Alto 529 Bryant Street Toronto TR1 Toronto, Canada 151 Front Street West 3rd, 5th, 6th and 7th Floors Washington, DC DC1 Ashburn, VA Filigree Court DC2 Ashburn, VA Filigree Court DC3 Ashburn, VA Chilum Place DC4 Ashburn, VA Filigree Court DC5 Ashburn, VA Filigree Court DC6 Ashburn, VA Filigree Court * CH4 Exception Equinix uses Digital Realty Trust (DRT) for our facilities and environmental protection controls at CH4. Equinix is only responsible for the controls and control objectives related to site security. DRT maintains separate SSAE16 certification for the Facilities and environmental controls within CH4. This information was not included within the scope of our audits. If Customers need to review DRT s SSAE16 information they are requested to schedule time through Equinix. Customers will also need to provide a list of environmental infrastructure questions and required records in their audit request. The site staff will coordinate with DRT to ensure the records are available to the customer, and escort the customer during on-site reviews of the infrastructure.

2 SSAE16 Frequently Asked Questions: 1. What did SAS70 stand for? 2. What is SSAE16? 3. What is the difference between SAS70 and SSAE16? 4. What is the difference between SSAE16 Type I and Type II? 5. What is the difference between SSAE16 SOC-1 and SOC-2? 6. Who performed the certification? 7. Are all the IBXs covered under this certification? 8. Why do customers require SSAE16 audits? 9. What happens during the audit process? 10. How do we keep the certification updated? 11. How do we request a SSAE16 report? 1. What did SAS70 stand for? Statement on Auditing Standards No. 70 was set up by the American Institute of Certified Public Accountants in 1993, SAS70 spelled out how an external auditor would assess the internal controls of an outsourcing service provider and issue an attestation report to outside parties or to a client. SAS70 has been replaced with SSAE16. The term SAS70 will now only apply to audits fully completed before July of What is SSAE16? The International Auditing and Assurance Standards Board (IAASB) recently issued the new International Standard on Assurance Engagements ISAE 3402, Assurance Reports on Controls at a Third Party Service Organization. As a result, the American Institute of Certified Public Accountants (AICPA) redrafted the Statement on Auditing Standards (SAS) 70 guidance around the execution of thirdparty Service Organization reports: Statement on Standards for Attestation Engagements (SSAE) No. 16 is an attestation standard put forth by the Auditing Standards Board (ASB) of the American Institute of Certified Public Accountants (AICPA) that addresses engagements undertaken by a service auditor for reporting on controls at organizations (i.e., service organizations) that provide services to user entities, for which a service organization s controls are likely to be relevant to a user entities internal control over financial reporting (ICFR). SSAE16 effectively replaces Statement on Auditing Standards No. 70 (SAS70) for service auditor s reporting periods ending on or after June 15, Two (2) types of SSAE16 reports are to be issued, a Type 1 and a Type What is the difference between SAS70 and SSAE16? The primary impact to Equinix is that SSAE16 requires the addition of a Management Assertion Letter that was completed and signed by Equinix Management and has been included in the final report. This written assertion attests to: The fairness of the presentation of the description of the service organization s system; The suitability of the design of the controls to achieve the related control objectives stated in the description; and The operating effectiveness of those controls to achieve the related control objectives stated in the description. 4. What is the difference between SSAE16 Type I and Type II? There are two types of service-auditor reports: Type I includes the service auditor s opinion on the fairness of the presentation of the provider s description of its controls and how well they re designed to meet specified control objectives. Type II, generally preferred for their greater depth, includes the same data as Type I as well as the auditor s opinion on the effectiveness of the controls during the period under review. 5. What is the difference between SSAE16 SOC-1 and SOC-2? SOC 2 reports will contain the same report elements as SOC 1 reports but will be prepared in accordance with the AT Section 101 attest standard rather than the SSAE16 standard. Furthermore, the control objectives in a SOC 2 report will be based on the AICPA and CICA s Trust Service Principles and Criteria, previously used by the WebTrust and SysTrust certifications. Like SOC 1 reports, SOC 2 reports are available in a Type 1 and a Type 2 report. Equinix is evaluating SOC-2 reports but is not currently actively engaged in SOC 2 audits. 6. Who performed the certification? Deloitte and Touche LLP works closely with IBX Operations Support to perform the audits in all U.S. IBXs classified as IBX+. Brightline Inc works closely with IBX Operations Support to perform the audits in select Legacy S&D IBX locations. These revisions of SAS70 represent the first significant modifications to the standard since it was issued nearly two decades ago. SSAE16 is intended to help bring US companies up to date with new international service organization reporting standards, ISAE This will simplify the process for auditing and reporting on international organizations.

3 7. Are all the IBXs covered under this certification? All active IBX data centers classified as IBX+ were covered by the 2011 audit series. All new future IBX s (classified as IBX+) can be included in the audit periods once 6 months of audit records have been accumulated by the site. 8. Why do customers require SSAE16 audits? Customers typically use this for financial controls towards the end of every year. We can communicate to customers that we are SSAE16 SOC-1 Type II certified and that we are in an active auditing period. 9. What happens during the audit process? Equinix IBXs participate in a physical and environmental (i.e. equipment that maintains the customer infrastructure, Equinix employees who maintain the equipment, and the Equinix process that the Equinix employees follow to maintain the equipment) audit. If during the audit, we encounter a situation that requires corrective action, we must demonstrate that we have processes in place to address that situation. 10. How do we keep the certification updated? Equinix achieved our initial SAS70 certification in 2009 and maintained our certification for all qualifying IBX plus locations until our conversion to SSAE16 in Our annual audit period runs from November 1, 2010 to October 31, The 2011 report will be available for release to our customers in mid-december. We are currently in the 2012 SSAE16 auditing period covering November 1, 2011 to October 31, This 2012 report should be available mid December We will continually maintain the most updated version. Every year we will have a new certification with updated information. Audit periods and impacted IBX s for the Legacy Switch and Data locations are defined on a yearly basis. The 2011 audit program ran from June 1, 2011, to November 30, 2011 with a final report due out in late December. The scope of the audit included the following sites. 11. How do you request a SSAE16 report from Equinix? Contact your Equinix Account Manager for the latest audit Equinix, Inc. DS-EN SSAE16 1F1 CL-DD 1112

4 IBX+ TECHNICAL SPECIFICATIONS CH3 CHICAGO IBX+ DATA CENTER ABOUT Platform Equinix SM is where global business and growth connect. The platform provides customers data centers with ample room for growth in reliable, well connected sites that enables them to reach their customers globally so that they can collaborate to accelerate growth. The Equinix global service delivery platform consists of International Business Exchange (IBX ) data centers located in 38 metropolitan areas across the Americas, EMEA, and Asia-Pacific. These International Business Exchange (IBX ) data centers serve as a reliable and secure destination for the world s most powerful networks and companies where they can leverage Equinix s interconnection and exchange services. Equinix s dynamic ecosystem enables companies to connect directly to their strategic partners in order to optimize the performance of their content and applications. It s what we do every day without compromise. Chicago is home to three major financial and futures exchanges, including the Chicago Stock Exchange, the Chicago Board Options Exchange (CBOE), and the Chicago Mercantile Exchange (the Merc ). Because of their close proximity and partnerships with Equinix, our Financial exchange service specializes in serving the unique needs of the banking and trading communities within the financial services sector. This service allows large banks and trading exchanges to link directly to their communities of interest key strategic partners and suppliers such as brokers, traders, clearinghouse merchants, data feed suppliers and proprietary software vendors. LOCATION 1905 Lunt Avenue Elk Grove, IL From Airports 25 mi/40 km from Midway Intl Airport (MDW); 10 mi/15 km from O Hare Intl Airport (ORD) Location Orientation 25 mi/40 km to Equinix CH1/2/4 IBX; 22 mi/36 km to CH6 IBX Parking Adjacent building parking available; no charge PROFILE Phone (USA or Canada) or (outside USA or Canada) support@equinix.com Square Footage Breakdown Leased 228,000 ft 2 (21,182 m 2 ) Colocation Area: Total 96,096 ft 2 (8,928 m 2 ) 2nd Floor (Phase A, B) 3rd floor (Phase A, B, C) 38,523 ft 2 (3,579 m 2 ) 57,573 ft 2 (5,349 m 2 ) Flex Space: 3,499 ft 2 (325 m 2 ) 1st Floor (ground level) 2,011 ft 2 (187 m 2 ) 3rd Floor 1,488 ft 2 (138 m 2 ) Satellite Platform 500 ft 2 (46 m 2 ) Telco Information NPA/NXX CLLI code LEC EGVGILEG AMERITECH LATA 358 GLOBAL SLA % Power availability % Temperature and Humidity availability % Cross Connect availability POWER Electrical Capacity 4 kva per cabinet UPS Configuration N+1 Block Redundant System # of Utility Feeders 2 # of Power Transformers 13 Utility Voltage 34.5kV, 3-phase Standby Power Phase A/B/C1 Fifteen 2,500 KW diesel engine generators Standby Power Config. N+2 (but the 2-swing gen sets are primarily for maintenance purposes and not emergency backup) COOLING Cooling Capacity 4 kw per cabinet (13,652 BTUH) Cooling Plant Water-cooled centrifugals chillers, water-side HX, air handlers SECURITY Physical Man trap entry Human 24x7 security guards Electronic CCTV and Recorders, Motion Detection, Hand Geometry Readers, Fiber Vault

5 IBX+ TECHNICAL SPECIFICATIONS CH3 CHICAGO IBX+ DATA CENTER BUILDING Construction Type Type 1A, non-combustible Building Type Three story, pre-cast, concrete building Floor Load Capacity Listed below: 1st Floor (ground level) 250 psf (11.97 kn/m2) 2nd & 3rd Floors 150 psf (7.18 kn/m2) Cabinet weight 2,350 lbs (1,066 kg) BUILDING CODE COMPLIANCE Building BOCA National Building Code 1996 Mechanical International Mechanical Code 1996 (Basebuild), 2006 (Phase C1) Plumbing Illinois Plumbing Code with Amendments 1997 (Basebuild), 2004 (Phase C1) Electrical National Electrical Code 2005 (Basebuild), 2011 (Phase C1) Life Safety 1996 BOCA Fire Code with Amendments Other 1997 Sate of Illinois Accessibility Code; Federal American with Disabilities Act (ADA) Regulations; Illinois State Energy Code; 2009 International Energy Code SIGNIFICANT BUILDING DATES Base Building Constructed 2007 Base Building RETROFITTED 2007 Equinix IBX Constructed 2007 Phase C 3rd Floor Expansion Construction 2011 FIRE PROTECTION Fire Suppression 19 Double-interlocked, pre-action (dry pipe) system zones sprinkler system. CERTIFICATIONS SAS 70 Type II certified INTERCONNECTION OPTIONS AVAILABLE System Overhead proprietary cable tray system with multi-tier ladder rack Cross Connects Single-Mode fiber, Multi-Mode fiber (62.5 and 50 micron), CAT5, CAT6, CAT5 (T1), and CAT3 (POTS) Equinix Metro Connect Extends choice and reach for carrier and network availability across metro areas Equinix Exchange Central switch for public and private peering Equinix Carrier Ethernet Exchange Enables Ethernet Service Providers to interconnect to CENs and expand the reach of Ethernet services Equinix Direct Automated network provisioning, multi-homing and billing EQUINIX IBX DATA CENTER LOCATIONS Located in 38 strategic metropolitan areas across the Americas, EMEA, and Asia-Pacific. AMERICAS EMEA ASIA-PACIFIC TORONTO CLEVELAND BUFFALO SEATTLE DETROIT PITTSBURGH SILICON VALLEY LOS ANGELES DENVER PHOENIX CHICAGO INDIANAPOLIS ST. LOUIS NASHVILLE ATLANTA DALLAS TAMPA BOSTON NEW YORK PHILADELPHIA WASHINGTON, DC AMSTERDAM LONDON DUSSELDORF FRANKFURT PARIS MUNICH SHANGHAI HONG KONG TOKYO MIAMI ZURICH GENEVA MILAN SINGAPORE RIO DE JANEIRO SYDNEY Equinix locations Partner Data Center SAO PAULO DS-EN IBXCH3 3F2 MB-CL 1108 EQUINIX CONFIDENTIAL Subject to change without notice. For distribution to existing Equinix customers, or to persons who have signed an Equinix Non-Disclosure Agreement Equinix, Inc.