GoFileRoom ES.ThomsonReuters.com CS.ThomsonReuters.com Technical & Integration Overview Revision 2 May 2010 1
Table of Contents Introduction... 5 Application Integration... 5 Auto List Service... 5 Auto File Import Service... 7 Auto File Import Service as a Conversion Tool -- CCH Document... 8 GoFileRoom QuickLaunch... 8 GoFileRoom Control Panel... 9 Tax Preparation Applications:... 10 GoSystem Tax RS (Thomson Reuters)... 10 ProSystem fx Tax (CCH)... 11 UltraTax CS (Thomson Reuters)... 13 Thomson Reuters Virtual Office (VO)... 15 Lacerte Tax (Intuit)... 15 Practice Management Applications:... 17 ProSystem fx Practice, Mize Houser, & Other Practice Management Applications... 17 Practice CS (Thomson Reuters)... 18 Engagement Applications:... 19 2
Engagement CS (Thomson Reuters)... 19 CaseWare Working Papers (CaseWare)... 20 ProSystem fx Engagement (CCH)... 21 Other Critical Applications... 22 GoFileRoom Single Sign-On (SSO) Options, including SAML... 22 GoFileRoom Infrastructure... 24 Atlanta, GA Data Center... 24 Flint, MI Data Center... 27 Exchange Drive Data Center... 27 GoFileRoom Production Environment... 28 Redundancy... 28 Operating Procedures and Protocols... 28 Compliance... 29 Application Security... 29 Document Level Security... 29 Performance Optimization... 31 Compression... 31 PDF Linearization & Web Optimization... 31 Bandwidth... 31.NET/Local Cache Solution... 32 Industry & Regulatory Compliance... 34 SAS 70... 34 Treasury Reg. 301.7216... 34 SEC Rule 17a-4... 34 1. Preserving additional records... 35 2. Backup Redundancy... 35 3
4
Introduction The Technical & Integration Overview is a comprehensive summary of GoFileRoom s infrastructure, security, and its integration with accounting and other applications. This overview is targeted at IT professionals and those who will be involved in the implementation process. The intent of this overview is to guide you in the understanding of some of the complex integration and security GoFileRoom offers your firm. It is not intended to answer all IT related questions nor should it be used as a training document. Thank you for reviewing the GoFileRoom Technical & Integration Overview documentation. Your firm is making a very prudent choice by seriously reviewing the leading, integrated document management, workflow, and scanning solution available to accounting firms today. Application Integration GoFileRoom s ApplicationFlow is a collection of services that integrate with critical applications in a typical accounting firm namely tax preparation, engagement/audit, practice management and other standard out of the box software (e.g., Adobe Acrobat and Office). The core of ApplicationFlow is the Auto List Service, the Auto File Import Service, GoFileRoom QuickLaunch, and the GoFileRoom Control Panel. Auto List Service The Auto List Service allows data from any ODBC data source (e.g., client database within a practice management system) to be processed and formatted into a customer specific format and then uploaded into GoFileRoom this then forms the content that populates the Lookup List (e.g., client name and client number in the Clients Drawer and/or vendor name and vendor number in the AP Drawer) that are associated with important indexing fields. 5
The utility is run as a service and has a graphical user interface (GUI), which can be installed on a workstation or on any available Windows server. A configuration file (INI file) controls the functionality of the application and can be tailored to meet the needs of each customer via the GUI front end. Once the utility is configured, the application runs on a regular scheduled basis (as a service) to automatically generate a fresh complete list of values as often as desired (generally set to automatically run every 4 hours). A log file can also be created to help troubleshoot problems and monitor results. Note: each time the service runs it uploads and replaces the existing list in GoFileRoom. It is not an incremental update. Any values no longer on the list (e.g. because they are no longer an active client) will still be available in the search function if there are documents indexed with that value. Prerequisites: before the utility can be run, the user must first set up the ODBC data source via Administrative Tools>Data Sources (ODBC) and then configure the utility via the GoFileRoom _LookupListSync INI (Manage).exe GUI. Any ODBC compliant data source can be used (e.g. Advantage, Excel, SQL Server, Access, CSV file, etc). Note: Your software vendor (e.g., time & billing software) can assist with creating an ODBC connection to your database. After the service is installed, configured, and started; the following steps are executed: 1. The configuration file (INI file) is read; 2. The query is run against the ODBC data source; 3. The database returns the query results as a pipe delimited text file named for their GoFileRoom Drawer & List ID (e.g., 000000001 1.txt); 4. The data is uploaded directly into GoFileRoom, creating the list values in the appropriate GoFileRoom drawer; and 5. A detailed Log file is written that logs program events and errors. 6
The diagram below illustrates the process: Auto File Import Service The Auto File Import Service is used to facilitate the automated import into GoFileRoom of files existing on network drives. Imported files are indexed in GoFileRoom according to rules defined in a script file and can include, but are not limited to, the following criteria: File name; Type of file (PDF, Word, etc.); Folder name; and Database lookups. The Auto File Import Service is commonly used to automatically import tax return PDF files generated from non Thomson Reuters software directly into any drawer in GoFileRoom with automatic indexing of the document (could also include the import of files generated by third party intelligent scanning products such as Copanion s GruntWorx and SurePrep s 1040 Scan). Documents must be saved in a designated network location (any network location is fine, including any sub folders in that location if desired) and typically using a special file naming convention (e.g., 06C_12345 001GOVT_v1.pdf). The utility may also be used to facilitate the back file import of existing files in network folders into GoFileRoom if formatted consistently. The utility is run as a service and has a simple graphical user interface (GUI), which can be installed on a scanner workstation or on an available server. An INI configuration file controls the functionality of the application and can be tailored to meet the needs of each customer via the GUI front end. 7
Once the utility is configured, the application runs as a service to automatically import files from the designated file folder and any sub folders on a regular scheduled basis (generally set to run every 4 hours). A log file is created to help troubleshoot problems and monitor results. The diagram below illustrates the process: Auto File Import Service as a Conversion Tool -- CCH Document When migrating documents from CCH Document to GoFileRoom, a report (Microsoft Excel file) is generated from CCH Document which provides information on necessary document filing structure. This report is then used to generate customized vbs scripts which works in conjunction with the Auto File Import Service. The Auto File Import Service then migrates these documents from CCH Document into GoFileRoom while also providing monitoring and log files that indicate document migration success. GoFileRoom QuickLaunch GoFileRoom QuickLaunch is a system tray application this is installed on a user s desktop as part of the GoFileRoom Client Add In. This powerful tool will allow users to search for documents or workflow folders using highlighted text from ANY application. 8
Here are some of desktop productivity capabilities provided by QuickLaunch: Search for and/or access Documents or Folders instantly by highlighting text in another application and initiating the command that is conveniently found in your system tray. Open your My Work dashboard directly from your desktop. Configure personal search criteria for future queries. Open multiple sessions of GoFileRoom to view several areas of the system simultaneously. GoFileRoom Control Panel Another desktop productivity tool provided by GoFileRoom is the Control Panel, which allows users to: Send a single file, multiple files, or an entire folder of files to GoFileRoom by dragging and dropping onto a desktop shortcut. Send a single email, multiple emails to GoFileRoom by dragging and dropping onto a Outlook folder. Upload files to GoFileRoom through a Windows Explorer "Send to GoFileRoom" rightclick option. Perform uploads in Silent mode using multi threaded technology for optimal performance Note: Send to GoFileRoom profiles can be configured to run in Interactive or Silent mode. When Silent mode is enabled, an indexing window will not appear when uploading files to GoFileRoom. Monitor the status of uploaded files. View uploaded files. Maintain your files, other than Word, Excel, and PDF, which are currently checked out for editing from GoFileRoom (a.k.a. generic editing). The Control Panel is a part of the GoFileRoom Client Add In by default and is a great tool for adding large amounts of documents with little to no user intervention (indexing) to GoFileRoom. 9
Tax Preparation Applications: GoSystem Tax RS (Thomson Reuters) Using GoFileRoom s ApplicationFlow integration, the GoSystem Tax RS tax return may be added directly into GoFileRoom as a fully bookmarked PDF file using the Print option File> Print> Select GoFileRoom printer from the Print drop down list> click OK. You will be prompted to log into GoFileRoom if not already logged in. Then, enter the values for the necessary index fields and click on Save. Note: some index fields may already be populated from GoSystem Tax RS if the GoFileRoom (DMS) client number and corresponding index fields are pre configured by your GoSystem Firm Administrator. It is most advantageous for maximizing the number of pre populated index fields if the client numbers in GoSystem Tax RS match those used in GoFileRoom (DMS client number). From within a client s GoFileRoom FirmFlow folder, direct integration also exists to open the live tax return in GoSystem Tax RS by clicking on the Tax Return button in GoFileRoom. 10
Once a client s tax return is open in GoSystem Tax RS, using GoFileRoom s QuickLaunch application, the functionality also exists to highlight the client s name (e.g., Chase ) > right click, copy > double click on the QuickLaunch icon in your system tray and be seamlessly directed into GoFileRoom to automatically search for related documents or FirmFlow folders matching the selected name (e.g., Chase ) or to your MyWork page in FirmFlow (these are user customizable settings). ProSystem fx Tax (CCH) Using GoFileRoom s ApplicationFlow integration, the Auto File Import Service can be used to automatically import and index tax return PDF files generated from ProSystem fx Tax directly into GoFileRoom as a fully bookmarked PDF file (with automatic indexing of the document). Documents must be saved in a designated network location (any network location is fine, including any sub folders in that location, if desired) and typically using the default file naming convention (e.g., 09C_12345 001GOVT_v1.pdf). The application runs as a service to automatically import files from the designated file folder and any sub folders on a scheduled basis (generally set to run every 4 hours). A log file is created to help troubleshoot problems and monitor results. A special script_tax.vbs file is used to convert the default filename into GoFileRoom index values. For instance: Filename 09C_12345 001GOVT_v1.pdf would be used determine that: 1. Imported file will appear as a PDF document in GoFileRoom 09C_12345 001GOVT_v1.pdf extension 2. The following GoFileRoom index values will be used to import the document: a. Client Number: 12345 001 09C_12345 001GOVT_v1.pdf 11
b. File Section: BUSINESS TAX 1120 09C_12345 001GOVT_v1.pdf according to the above script_tax.vbs, character C stands for BUSINESS TAX 1120 as per ProSystem fx Tax s standard tax type naming convention c. Document Type: Tax Return predefined in script_tax.vbs file d. Year: 2009 09C_12345 001GOVT_v1.pdf e. Period End: 12/31 predefined in script_tax.vbs file f. Description: v1 09C_12345 001GOVT_v1.pdf Note: in order for the automated indexing into GoFileRoom to work, the client numbers used in ProSystem fx Tax must match those used in GoFileRoom. Alternatively, the PDF of the tax return can be manually imported into GoFileRoom immediately after it has been created as a PDF, using the Save to GoFileRoom icon in Adobe Acrobat: In this instance, the PDF file can be saved to any network location path and file name. The file will need to be manually indexed in GoFileRoom and when saved, the bookmarks will remain intact. If desired, the Print to GoFileRoom functionality may be utilized to directly import a PDF copy of the tax return into GoFileRoom (the file will need to be manually indexed). However, the Print to GoFileRoom method will not include any bookmarks. Once a client s tax return is open in ProSystem fx Tax, using GoFileRoom s QuickLaunch application, the functionality also exists to highlight the client s name (e.g., Chase ) > right click, copy > double click on the QuickLaunch icon in your system tray and be seamlessly directed into GoFileRoom to automatically search for related documents or FirmFlow folders matching the selected name (e.g., Chase ) or to your MyWork page in FirmFlow (these are user customizable settings). 12
UltraTax CS (Thomson Reuters) UltraTax CS has direct integration with GoFileRoom. You can print returns, extensions, and input screens from UltraTax CS to GoFileRoom (with automatic indexing of the document). UltraTax CS automatically generates a bookmarked PDF of the document. To configure the integration between GoFileRoom and UltraTax CS, choose Setup / System Configuration click the GoFileRoom tab, and then click the GoFileRoom Options button. To print the returns, extensions, and input screens from UltraTax CS to GoFileRoom choose the option for GoFileRoom in the print where section of the print dialog in UltraTax CS. A bookmarked PDF of the preparer copy will print to the GoFileRoom Drawer selected based on the configuration from above. A confirmation window will appear for each document indexed into o GoFileRoom (as seen below). 13
Note: If the client does not exist in GoFileRoom, then it will be added to the lookup list of values. Once a client s tax return is open in UltraTax CS, using GoFileRoom s QuickLaunch application, the functionality also exists to highlight the client s name (e.g. Chase ) > right click, copy > double click on the QuickLaunch icon in your system tray and be seamlessly directed into GoFileRoom to automatically search for related documents or FirmFlow folders matching the selected name (e.g. Chase ) or to your MyWork page in FirmFlow (these are user customizable settings). 14
Thomson Reuters Virtual Office (VO) GoFileRoom has been tailored to integrate with products hosted on Thomson Reuters Virtual Office environment. Support for VO includes the following: Practice CS integration (sending invoices, viewing firmflow, printing reports) GoFileRoom Auto List Service used to integrate Client Numbers from Practice CS on VO Microsoft Office Integration (Word /Excel that are hosted in VO) CSA Integration UT integration Print to GFR (for apps that do not have direct integration) Adobe Currently VO has support for Adobe Reader (only) when Adobe is hosted in VO. Plans are in place to offer Adobe Standard in an upcoming release The following GoFileRoom components are Client side applications that work directly with GFR and do not require VO but must be installed on the users desktop. GFR Control Panel GFR QuickLaunch Lacerte Tax (Intuit) Using GoFileRoom s ApplicationFlow integration, the Auto File Import Service can be used to automatically import PDF tax returns generated from Lacerte Tax directly into GoFileRoom (with automatic indexing of the document). Note: Lacerte Tax does not generate a bookmarked PDF of the tax return unless the Lacerte DMS is also used. The PDF documents must be saved in a designated network location (any network location is 15
fine, including any sub folders in that location, if desired) and typically using the default file naming convention. The application runs as a service to automatically import files from the designated file folder and any sub folders on a scheduled basis (generally set to run every 4 hours). A log file is created to help troubleshoot problems and monitor results. A special script_tax.vbs file is used to convert the default filename into GoFileRoom index values (see information under ProSystem fx Tax, above). Note: in order for the automated indexing into GoFileRoom to work, the client numbers used in Lacerte Tax must match those used in GoFileRoom. Alternatively, the PDF of the tax return can be manually imported into GoFileRoom immediately after it has been created as a PDF, using the Save to GoFileRoom icon in Adobe Acrobat: In this instance, the PDF file can be saved to any network location path and file name. As an alternative to the above methods, for overall simplicity (if desired), the Print to GoFileRoom functionality can be utilized to directly import a PDF copy of the tax return into GoFileRoom (the file will need to be manually indexed). Once a client s tax return is open in Lacerte Tax, using GoFileRoom s QuickLaunch application, the functionality also exists to highlight the client s name (e.g., Chase ) > right click, copy > double click on the QuickLaunch icon in your system tray and be seamlessly directed into GoFileRoom to automatically search for related documents or FirmFlow folders matching the selected name (e.g., Chase ) or to your MyWork page in FirmFlow (these are user customizable settings). 16
Practice Management Applications: ProSystem fx Practice, Mize Houser, & Other Practice Management Applications Using GoFileRoom s ApplicationFlow integration, the Auto List Service allows data from any ODBC data source (such as a practice management system) to be tailored, processed and formatted into a customer specific format and then uploaded into GoFileRoom on a regular scheduled basis. This forms the content that populates the Lookup List (Examples: the client name and client number in the Clients Drawer and/or the vendor name and vendor number in the AP Drawer) that are associated with key index fields. The Auto List Service integrates will all popular Practice Management applications: Practice CS (Thomson Reuters) CSP (Thomson Reuters) Thomson Elite ProSystem fx Practice (CCH) Visual Practice Management (CCH) CPA Practice Manager (Sage/CCH) Mize Houser CPAMIS PowerPM 17
Microsoft Excel files, Access & SQL databases See the Auto List Service section above for more details. In addition, when users are actively in a practice management application they may use GoFileRoom s QuickLaunch application to automatically search for related documents or FirmFlow folders matching the selected name (e.g. Chase ) or to your MyWork page in FirmFlow (these are user customizable settings). Practice CS (Thomson Reuters) Documents such as reports, invoices, statements, letters and labels from Practice CS can be printed directly into GoFileRoom (mapping of GoFileRoom indexes to database fields in Practice CS is first required). The GoFileRoom Configuration dialog must be used to select which Practice CS database fields correspond to which GoFileRoom indexes. 18
The GoFileRoom Portlet that gives GoFileRoom users access to all of their documents has been added to the Firm, Staff and Client dashboards. You can open the GoFileRoom Portlet Options dialog at any time by right clicking the GoFileRoom Documents portlet and choosing Options from the context menu. You can click any of the column headers to sort the list of documents by that column in ascending or descending order. You can click and drag one or more column headings to the top of the portlet to group the list of documents by those columns. You can also click the title bar of the portlet to open the GoFileRoom login screen. Engagement Applications: GoFileRoom, via ApplicationFlow, consists of a collection of services that integrate with the critical applications used in a typical accounting firm, including leading Paperless Audit/Engagement applications. Engagement CS (Thomson Reuters) Upon finalization of the engagement and once a client engagement is opened in the Engagement ES application, the File> Send Engagement to> GoFileRoom menu option can be utilized to directly import a fully bookmarked PDF copy of the engagement file into GoFileRoom (with the choice of password protecting the PDF if desired). 19
In addition, once a client engagement is opened in the Engagement CS application, right click functionality can be utilized to directly import a fully bookmarked PDF copy of one or more reports/deliverables from the engagement file into GoFileRoom. Right click on any desired workpapers and select the Print option. Then, using the GoFileRoom option in the Store Image in menu that appears, select each workpaper that that you wish to be included and then click on the GoFileRoom button to import the workpapers into GoFileRoom as a single bookmarked PDF document. After the PDF document is processed, GoFileRoom will open the document will need to be manually indexed as required. CaseWare Working Papers (CaseWare) Using GoFileRoom s customized Auto Link Service, a link can be automatically created for every CaseWare binder file and then the link is imported into GoFileRoom, whether it be a.ac (binder package, uncompressed) or a.ac_ (binder package, compressed) file. The link resides inside GoFileRoom with its own distinct icon. 20
When the link is activated from within GoFileRoom, it opens the live CaseWare file stored on the client s network (Note: to open the live binder file, the user requires access to CaseWare and the client network). Upon finalization of the engagement, once the.ac or.ac_ binder file is created and saved to the client s network, it may be automatically imported and indexed in GoFileRoom via ApplicationFlow s Auto File Import service. Alternatively, it may be manually added and indexed (e.g., using the right click Send to GoFileRoom method; or the drag and drop method). The binder file will be stored in GoFileRoom as a finalized archived version and is identified using the same icon as displayed above for the live engagement file. When the archive file is activated in GoFileRoom, it opens in the CaseWare application (Note: to open the file, the user requires access to CaseWare). The client can also store a PDF copy of the finalized Audit binder in GoFileRoom once the binder package is created, the entire file is printed to the generic Adobe PDF print driver and saved to a specified network location using a specified file name. Then, using the ApplicationFlow Auto File Import Service, it will sweep the PDF binder file/s and automatically import and index the file/s into GoFileRoom, with all of the bookmarks remaining intact. Alternatively, the PDF finalized audit binder file can be manually imported into GoFileRoom immediately after it has been created as a PDF, using the Save to GoFileRoom icon in Adobe Acrobat: In this instance, the PDF file can be saved to any network location path and file name. The file will need to be manually indexed in GoFileRoom and when saved, the bookmarks will remain intact. If desired, the Print to GoFileRoom functionality may be utilized to directly import a PDF copy of the finalized audit binder into GoFileRoom (the file will need to be manually indexed). However, the Print to GoFileRoom method will not include any bookmarks. ProSystem fx Engagement (CCH) Upon finalization of the engagement, GoFileRoom s ApplicationFlow utilities can integrate with ProSystem fx Engagement (PFX Engagement) via the Auto File Import Service to store a finalized copy of the audit engagement binder package (.azp file) in GoFileRoom. The 21
binder file, once created, is automatically imported and indexed within GoFileRoom (Note: this requires additional implementation services from the GoFileRoom Support Team or your GoFileRoom Consultant). The file has its own special icon. All the underlying data is retained in the binder package and when the file is accessed from within GoFileRoom, it can be saved and then opened within PFX Engagement (Note: users will require access to their PFX Engagement application in order to be able to open the binder file). The binder package (.azp file) can also be manually imported into GoFileRoom (e.g., using the right click Send to GoFileRoom method; or the drag and drop method) and will be identified using the same icon and will work in the same manner. In addition to the binder package (.azp file), our best practices recommends client s use the Print to GoFileRoom method to store a PDF copy of the finalized engagement binder file in GoFileRoom (Note: no bookmarks are created when printing from PFX Engagement). If bookmarks are desired, they need to be manually created in PDF Edit mode after the document has been imported. Note: Should ProSystem fx Engagement ultimately provide the ability to create a bookmarked PDF like their tax application, ApplicationFlow s auto-file import service can be used to automatically store and index these PDF files. Other Critical Applications GoFileRoom also integrates with other critical applications used by today s accounting firm, such as Microsoft Office (Word, Excel, and Outlook) and Adobe Acrobat. GoFileRoom has also established relationships with the leading scan and fill vendors, SurePrep and Copanion, where our integration may be leveraged to automatically store and index the bookmarked PDFs generated by 1040Scan and GruntWorx, respectively. In addition, GoFileRoom has backend integration available through APIs and.net Web Services. These can be leveraged when there is a need for additional functionality outside of the normal GoFileRoom implementation. GoFileRoom Single Sign-On (SSO) Options, including SAML Single Sign On (SSO) allows for a single point to terminate/block the use of the online application. GoFileRoom can be configured to allow SSO access to the application after being authenticated on the client s network. GoFileRoom is concerned about your firm s security, and we have built into the SSO mechanism, numerous features and safety checks to ensure your users have been properly authenticated before allowing them to access the application. Our 22
SSO system is built on an industry standard protocol called SAML, Security Assertion Markup Language (we currently support SAML version 2.0, in what the technical documents call the Browser Artifact profile). The minimum requirements to use SAML based SSO: A SAML 2.0 assertion generation and retrieval service supporting the Web Browser SSO profile of SAML that can be called externally from GoFileRoom s web servers. The assertion retrieval service must support SOAP. If the assertion retrieval service is protected using Basic Authentication, you will need to create an account on your system that the GoFileRoom application can use when retrieving the SAML assertion. The SAML assertion artifact must include a globally unique Source ID (40 hexadecimal characters), so that we can positively identify your firm from all other firms. The SAML protocol documentation suggests SHA1 hashing your firm s URL to calculate this value. A typical SSO scenario using the Web Browser SSO profile of the SAML protocol is as follows: 1. The user browses a web portal site at your firm and requests to use the GoFileRoom application. 2. The web portal generates an artifact (a piece of encoded data) and returns it along with a redirect command to the client browser. 3. The user s browser redirects to the GoFileRoom website with the artifact attached as a parameter. 4. The GoFileRoom application decodes the artifact, verifies it is from a trusted host, and uses your firm s configuration information to call back to the your assertion retrieval service at your web portal with the assertion artifact as a parameter using the SAML protocol. 5. A SAML responder at your web portal verifies the artifact is valid and is being requested from an appropriate trusted site, then returns the actual SAML assertion to the GoFileRoom application, which contains all of the necessary authentication information. 6. The GoFileRoom application verifies the contents of the assertion and uses the user name in the assertion to login to the GoFileRoom. 23
GoFileRoom Infrastructure GoFileRoom s servers are co located at two hardened data center facilities that are located in different geographic regions of the U.S Atlanta, GA (primary data center) and Flint, MI (secondary data center). The facilities have multiple layers of physical protection and entrance is not permitted without company authorization. Access to the data center is logged by the data center security personnel. Access to GoFileRoom servers is restricted as they are maintained in a secure, locked cabinet at the data center facility. The digital lock restricts access to the servers by user assigned PIN number. The data centers have many aspects to ensure high availability. These include redundant paths and connections to the internet. Diesel generators with dual sources of fuel are onsite to ensure power availability and special fire retardant systems and ventilation systems are in the data centers to ensure proper operating temperatures and avoid fires. The entire system is firewalled and configured to ensure access is limited only through legitimate ports. Data center operators monitor the availability and uptime of the GoFileRoom servers 24x7x365. Both data centers are SAS 70 Type II certified. Atlanta, GA Data Center Our production data center is located in Atlanta, GA via Quality Technology Services (QualityTech), which is one of the nation s largest privately held providers of data center facilities and managed services. They provide unmatched availability, scalability and security through their nationwide footprint of robust data center facilities. With more than 2 million square feet of data center space strategically located throughout the United States, QualityTech delivers industry leading power and cooling density as well as a dynamic network and worldclass managed services. Their aim is to enhance their customer's position in their market place by improving operational performance, controlling costs and mitigating risk associated with IT infrastructure. The Atlanta data center s specifications are as follows (http://edeltacom.com/facilities/statsheets/webstatsheet_atlantaga.pdf): BUILDING Total Size 546,640 sq. ft. data center footprint 990,000 sq. ft. total enclosed space Construction Concrete & brick structure with reinforced steel. Dual reinforced roof. 85MPH 24
wind rating. Shipping/Receiving Large truck (18 wheeler) docks and small truck docks are able to support all of your shipping requirements. Secured Receiving area designated for customer owned equipment. FLOOR SPACE Total Raised Floor 200,000 sq. ft. available Q3 2007 250,000 additional sq. ft. available 3 Q '08 Office Space 200,000 sq. ft. office space COMMUNICATIONS Carriers Internal Cabling External Cabling Direct fiber access to Sprint, Level 3, Time Warner Telecom, BellSouth and WorldCom with Conduit to AGL Networks, MFN and Southern Telecom. Other accessible fiber providers include Qwest, WillTel/AT&T, Norfolk Southern RR, Deltacom, Adelphia, Media One and Looking Glass Networks. Copper or fiber access to carrier bandwidth using cable management trays throughout building. Multiple secure entrances into building including multiple CO redundancy and fiber access to primary carriers. Dark fiber available from multiple carriers. POWER Power to Facility Generated Power Power Cabling On site Georgia Power substation with 80MW of N+1 power (3x40MW transformers) fed by three diverse substations and two electrical grids. 3 x 40 is 120MW. (19) 2.0MW generators with a static UPS provide back up power of over 20MW's of usable power. All power cabling below floors is installed in either conduit or sealtight flexible conduit with approved connectors to all equipment. 25
All Systems Supported by 24/7/365 computer monitoring and facility engineers. COOLING Air Handling Supported by 24/7/365 computer monitoring and facility engineers. Air Quality Air temperature under floor delivered at 68 ± 5 with humidity at 50% ± 5%. Water Detection Leak detection under all raised floor. Drains are utilized to remove any water from under floor. FIRE PROTECTION Smoke & Heat Detection VESDA Smoke sensors above raised floor. Very Early Smoke Detection Apparatus the world's leading air sampling smoke detection system provides the earliest possible warning of a potential fire event by detecting smoke particles at the incipient (first) stage of fire. Multi Stage Protection Pre action dry pipe system requires alert from two sensors, which activates pipe fill and a final stage when the temperature exceeds thresholds. PHYSICAL SECURITY Entrances Property Perimeter Security Guards Closed Circuit Video All building entrances require card key access. Data Center floor and secured areas require card key and two factor biometric authentication (finger print and iris scan) Security fence surrounds perimeter of property with CCTV monitoring. Single site entrance with security gate and guard house. Guards on site 24/7/365. Active patrols both inside and outside the facility. 55 cameras cover inside and exterior of building, property perimeter, all entrances, alternate workspace, and data center floor. Roof of building is monitored with CCTV and motion detectors. 26
FACILITY MONITORING Facility Engineers Power Management Environment Management Facility engineers on site and available by pager. Engineers trained to control and maintain all critical facility components. Critical power system controlled by automated management system, which controls all switching. Air temperature, humidity, fire detection, and water pressure all managed by automated control systems. Flint, MI Data Center Our data center in Flint, MI is managed by Online Tech, Inc. ( Online Tech ) www.onlinetech.net, which is one of Michigan s largest network fo managed data centers. Like Atlanta, GA, Online Tech provides unmatched availability, scalability and security within their data center facilities. Online tech was established in 1994 and strives to provide their clients with the highest degree of reliablility, security and flexibility. Online Tech has one many awards including 2009 FastTrack Fourth Time Winner of Michigan s Fastest Growing Company Awards 2008 FastTrack Third Time Winner of Michigan s Fastest Growing Company Awards 2007 FastTrack Second Time Winner of Michigan s Fastest Growing Company Awards 2006 FastTrack Winner of Michigan s Fastest Growing Company Award 2005 Michigan 50 companies to watch Recognized for growth and success The Online Tech data center is SAS 70 Type II Audited. Specifications are as follows: Exchange Drive Data Center Located in Genesee County, Michigan, the Exchange Drive data center was originally built by EDS as GM s Disaster Recovery Data Center for GMAC and other brands. 32,500 square feet: 22,500 sq ft of raised 24 floor; 8,000 sq ft of work place recovery in stand alone building. Dual pooled 1300 KVA diesel generators Three 2,000 Amp Emerson switches Three pooled 562.5 KVA UPS 27
Over 300 tons cooling Pass card and biometrics for data center entrance Environmental monitoring with laser based smoke and particulate sensors Ground level entry dock and semi truck loading dock with pallet jack allow for large deliveries. Video surveillance with 90 day DVR Gigabit fiber connections to OTNet and gigabit fiber connection to the Internet GoFileRoom Production Environment Redundancy The entire production system (documents & data) is mirrored (data is replicated in real time) to the secondary data center. The secondary data center can act as a full production site in the event of a disaster whereby the primary data center becomes inoperable. In the event that GoFileRoom fails over to secondary site, transition to the users will be seamless. Thomson Reuters provides regular fail over testing between primary & secondary sites. The entire production data center is also backed up to tape. As an option, customers may receive on a regular basis DVD copies of their documents. The DVD includes a viewer that allows for easy access to the documents and all documents are provided in their native format (e.g.,.doc,.xls,.pdf). Operating Procedures and Protocols The following are some key aspects of GoFileRoom s security procedures to ensure maintenance of the application s security: Update Management GoFileRoom monitors the availability of updates regularly. Security updates are made available immediately, applied to a test environment and then released to production. GoFileRoom has regularly scheduled maintenance windows for applying system updates to the hardware & firmware. Virus Management Server based antivirus software is updated regularly to ensure the latest antivirus databases. No foreign software or disks is allowed on the servers without running through virus detection software. Security Testing GoFileRoom performs monthly security analysis including, but not limited to, penetration testing, known exploits & overall system stability. In addition to this, we conduct security analysis through various outside vendors. All potential risks to the system are addressed immediately. 28
Compliance Audit trails are maintained on user activity within the system. Security reports provide access to audit trails and access to all documents is audited (including searching, viewing, editing, deleting and emailing). Audit reports may be viewed by document, drawer, user, and more. Audit trail records cannot be modified but the configuration of audit preferences are customizable by the client GoFileRoom system administrator. Some custom audit reports are only available through our professional Services team. As an option to be selected by the customer, GoFileRoom supports rules based archiving of documents onto Write Once (WORM) media. This is a requirement for specific industries (i.e., SEC regulated companies) for electronic record keeping. Application Security Access to GoFileRoom.com is through HTTPS this is a 128 bit encrypted SSL certificate. The certificate is registered with VeriSign. All access to GoFileRoom requires username and password. Passwords must be minimum length of 8 characters, must contain both alpha and numeric characters and are case sensitive. Customer Administrators can apply rules for password expiration. Passwords are encrypted and stored encrypted. Even if the database is compromised in anyway, passwords cannot be interpreted. Security can be assigned at the File Room level, Drawer level, and Document level. Security can be assigned to a user or to a group of users. Security rights can restrict viewing, adding, editing and more. In addition, customers can restrict user access by their IP Address. User access security is managed by the customer through GoFileRoom s System Administration module. Document Level Security Document Security provides an additional layer of security to the Drawer Permissions, and with appropriate planning can be implemented effectively. 29
Document Level Security is configured according to the following accessibility rules : (i) Deny Access, (ii) Allow Access, or (iii) No Edit access. These rules are applied to documents based on any combination of the index values in the relevant Drawer. Our Best Practices recommendation is to configure Document Security at the Group level. If there are exceptions to the Group Document Security rules, then we recommend you configure these exceptions at the User Document Security level for the individual users affected. If Document Security is configured to Deny Access to documents with certain values (such as Business Tax File Sections), then the User or Group will have access to all documents within the Drawer except those with the specified Tax File Section(s). Conversely, if Document Security is configured to Allow Access to documents with certain values (such as Client Number), then the User or Group will only have access to documents within the Drawer that have the specified values. No Edit configuration allows users to view documents with certain values (such as Tax File Sections) but without the capability to edit/download them (toolbars and right click menu option to Edit will be removed) this allows read only rights to the applicable documents (Note: the ability to print the documents remains). 30
Performance Optimization Compression GoFileRoom uses the latest in image compression technology to make the most compact webfriendly PDF files available to users of the system. Additionally, all PDF files are OCR d to support text searching (Google style) capabilities. PDF Linearization & Web Optimization GoFileRoom optimizes PDF documents to take advantage of PDF Linearization. This in conjunction with our servers enabling byte serving allows for the efficient streaming of PDFs to browsers. Bandwidth Bandwidth refers to the amount of information that can be carried in a given time period (usually a second) over a wired or wireless communication link. In digital systems, bandwidth is expressed as bits per second (bps). The higher the bandwidth, the more data can be transferred in bits per second. Available bandwidth becomes very important when you're running webbased products. GoFileRoom is more sensitive to low bandwidth than other web pages and as a result, requires more bandwidth, processing power and memory than standard internet browsing. If your network does not meet the system requirements for GoFileRoom, you may have inadequate bandwidth. If data does not flow fast or freely enough, the performance of GoFileRoom may suffer and the end user may encounter sluggishness and/or error messages. In your office, there are many factors to take into account when determining your bandwidth requirements, including your current systems and applications, how many people will be utilizing GoFileRoom and the frequency of utilizing GoFileRoom. A GoFileRoom consultant can work with your Network/IT technicians to determine the optimal bandwidth requirements for your office. Note: Many Internet activities may occupy bandwidth that would otherwise be used for GoFileRoom e.g., streaming video/music, peer to peer file sharing services, chat software, network gaming, voice over IP, web based meeting services and other web based applications. There are many tools that can provide you with bandwidth utilization. As general guidelines, your network is healthy in these conditions: 31
Utilization is running up to 15 percent most of the time. Utilization is peaking at 30 to 35 percent for a few seconds at a time, with large gaps of time between peaks. Utilization is peaking at 60 percent for a few seconds, with large gaps of time between peaks. However, in this instance, locate the reason for the peak. Determine if the problem might get worse or if you can isolate it. If the 30 percent utilization peaks start occurring very close together, your network starts showing signs of degraded performance. The web offers free tools that you can use to check your internet connection speed and bandwidth, or monitor the flow of internet traffic. Speed tests can tell you if certain regions of the internet are currently slowed down, which helps you determine if your internet connection speed is a global or local problem. Note: GoFileRoom data centers are contracted for 50 Mbps with unlimited burstability..net/local Cache Solution.NET Local Cache storage enables customers to store copies of documents on their local network. When accessing documents, retrieval will be from the local server unless the synchronization of the document has not been completed. In this case, the document will be retrieved from the GoFileRoom server via the internet. The implementation of the.net Local Cache storage is transparent to users. Users continue to log into GoFileRoom.com with no user interface changes or restrictions. Users continue to upload their documents to GoFileRoom.com. Once documents are on the GoFileRoom server, a synchronization module transmits copies of the new and updated documents to the.net Local Cache storage server. The local server is a GoFileRoom managed server, so backups are not required. The following chart provides an overview of the.net Local Cache server architecture. 32
33
Industry & Regulatory Compliance SAS 70 The primary GoFileRoom data center undergoes regular SAS 70 audits. A detailed report can be obtained from the GoFileRoom data center for a fee. However, a copy of a compliance letter from QTS or Online Tech can be provided for no fee. In addition, clients may request a facility tour hosted by data center personnel. Treasury Reg. 301.7216 Maintaining the confidentiality of taxpayer return information is a core policy of Thomson Reuters, and we have designed our systems to ensure that such information is protected. Thomson Reuters is well aware of the application of the rules under sections 6713 and 7216 of the Internal Revenue Code, and we make every effort to be fully compliant with them. In addition, GoFileRoom supports the manual or automated redaction of PDFs stored in GoFileRoom to assist firms in complying with this regulation by blocking out sensitive information such as Social Security Numbers. SEC Rule 17a-4 Compliancy with SEC Rule 17a 4 requires that a firm implement policies and procedures that are beyond the control of GoFileRoom including mandates that stipulate which records are to be retained and preserved. As such, total compliancy with Rule 17a 4 is beyond the scope of the GoFileRoom document management system where GoFileRoom has no control over which information is added to the system. There are sections of the rule however, that do apply to GoFileRoom as it pertains to the usage of GoFileRoom as a firm s chosen electronic storage media [Rule 17a 4(f)(2)(ii)] including; A. Preserve the records exclusively in a non rewritable, non erasable format; B. Verify automatically the quality and accuracy of the storage media recording process; C. Serialize the original and, if applicable, duplicate units of storage media, and time date for the required period of retention the information placed on such electronic storage media; and D. Have the capacity to readily download indexes and records preserved on the electronic storage media to any medium acceptable under this paragraph (f) as required by the Commission or the self regulatory organizations of which the member, broker, or dealer is a member. 34
Analysis of these items, reveal areas where GoFileRoom can enhance our procedure to more fully comply with the intent of the rule. These enhancements could include; 1. Preserving additional records Currently, only the latest version of a document is being backed up to WORM media. The procedure could be changed so that all versions of a document (including those flagged as deleted, replaced, or purged) are also included in the backup. In addition to backing up documents, and their associate indexes and history, the backup methodology could also be changed to include other information such as FirmFlow data, email transactions, etc. 2. Backup Redundancy Redundant procedures can be put in place to ensure that the WORM backup is running appropriately and that the data collected represents an accurate picture of the data for a given day. 35