{"id":504299,"date":"2023-12-08T12:00:11","date_gmt":"2023-12-08T17:00:11","guid":{"rendered":"https:\/\/www.commvault.com\/?page_id=504299"},"modified":"2023-12-08T12:00:30","modified_gmt":"2023-12-08T17:00:30","slug":"security-terms","status":"publish","type":"page","link":"https:\/\/www.commvault.com\/legal\/security-terms","title":{"rendered":"Security Terms"},"content":{"rendered":"\n<h1 class=\"wp-block-heading\" id=\"h-security-terms\">Security Terms<\/h1>\n\n\n\n<p class=\"\"><em>SaaS Solution meets the confidentiality, integrity, and availability standards set by government agencies and enterprises. &nbsp;For more information on SaaS Solution\u2019s best-in-class security and compliance program, please visit our <\/em><a href=\"https:\/\/www.commvault.com\/legal\/trust-center\"><em>Trust Center<\/em><\/a><em>. Any terms not defined have the same definition ascribed to them in the Terms.<\/em><\/p>\n\n\n\n<div style=\"height:50px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-1 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:20%\"><style>\nh4, h3, h2 {\nposition: relative;\n}\n\np {\n\tposition: relative;\n\tz-index: 1;\n}\n.wp-block-group a,\n.wp-block-column > ul {\n\tposition: relative;\n\tz-index: 1\n}\nh2::before,\nh3::before,\nh4::before {\n    content: \"\";\n    display: block;\n    height: 8rem;\n    margin-top: -8rem;\n    pointer-events: none;\n    visibility: hidden;\n}\n<\/style>\n<div class=\"wp-block-commvault-toc\">\n\t<div class=\"js-toc\">\n\t\t\t<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:80%\">\n<h2 class=\"wp-block-heading is-style-heading-3\" id=\"h-1-regulatory-compliance\">1. Regulatory Compliance<\/h2>\n\n\n\n<p class=\"\">Commvault\u2019s Customers know their data! As such, our Customers are in the best position to ensure compliance with all laws and regulations governing Customer Data, including without limitation, obtaining consents from, and providing disclosures to, data subjects and end users with respect to data security and privacy. Commvault implemented reasonable security measures as described herein and in relevant documentation.<\/p>\n\n\n\n<h2 class=\"wp-block-heading is-style-heading-3\" id=\"h-2-confidentiality\">2. Confidentiality<\/h2>\n\n\n\n<p class=\"\">By the nature of Commvault\u2019s services, Commvault and its Customers regularly share confidential, proprietary information with each other. \u201cConfidential Information\u201d means any and all information and material disclosed by one party (the \u201cDiscloser\u201d) to the other party (the \u201cRecipient\u201d) including but not limited to Customer Data, trade secrets, know-how, inventions, techniques, processes, programs, ideas, algorithms, formulas, schematics, testing procedures, software design and architecture, computer code, internal documentation, design and functional specifications, product requirements, problem reports, performance information, documents, and other technical, business, product, marketing, customer, financial information, or any other information the Recipient knows or ought to is confidential due to its nature. Recipient shall hold all Confidential Information in strict confidence and take the same degree of care that it uses to protect its own confidential information (but in no event less than reasonable care) to protect the confidentiality thereof. Confidential Information does not include information that (i) is or becomes generally known by the public, (ii) was or becomes available to a party on a non-confidential basis from a person not otherwise bound by the Terms or is not otherwise known to be prohibited from transmitting the information, or (iii) is independently developed by the parties, provided that the party claiming an exception shall have the burden of establishing such exception.<\/p>\n\n\n\n<h2 class=\"wp-block-heading is-style-heading-3\" id=\"h-3-security-compliance\">3. Security Compliance<\/h2>\n\n\n\n<p class=\"\"><strong>3.1 <mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-crocus-color\">Security Measures<\/mark>.<\/strong> Commvault has implemented and will maintain a security program that leverages a combination of the ISO\/IEC 27000-series of control standards, NIST 800-30\/CSF, and Information Security Forum ISF best practices. Commvault represents and warrants that the SaaS Solution is compliant with CJIS controls, FIPS 1401-2, SOC 2 Type II and PCI. Commvault regularly tests, assesses and evaluates the effectiveness of its technical and organizational measures set forth below and performs annual penetration and security incident response testing on the SaaS Solution. Commvault partners with Microsoft Azure and Oracle for hosted storage. The technical and organizational measures set forth by Microsoft Azure can be found <a href=\"https:\/\/www.microsoft.com\/en-us\/trust-center\/privacy\" target=\"_blank\" rel=\"noreferrer noopener\">here<\/a> and by Oracle <a href=\"https:\/\/www.oracle.com\/legal\/privacy\/services-privacy-policy.html\" target=\"_blank\" rel=\"noreferrer noopener\">here<\/a>.<\/p>\n\n\n\n<p class=\"\"><strong>3.2 <mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-crocus-color\">Physical Security<\/mark>.<\/strong> Commvault\u2019s web applications, communications, and database servers are located in secure facilities with security measures including but not limited to: (i) access authorization and documentation for employees and third parties, (ii) regulation and restriction of physical and digital access credentials, (iii) maintaining electronically-locked doors and separate cages within facilities (e.g., production and development), (iv) logging, monitoring, and tracking access to all facilities with electronic and CCTV video surveillance by personnel, and (v) protecting all facilities with security alarm systems and user-related authentication procedures, including biometric authentication in some instances, and electronic access cards.<\/p>\n\n\n\n<p class=\"\"><strong>3.3 <mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-crocus-color\">Technical Security<\/mark>.<\/strong> Commvault has implemented measures to ensure ongoing confidentiality, integrity, availability and resilience of processing systems and services. For our security and yours, we do not list these technical security measures publicly. For specific details, please contact us at <a href=\"mailto:SOC@commvault.com\">SOC@commvault.com<\/a>.<\/p>\n\n\n\n<p class=\"\"><strong>3.4 <mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-crocus-color\">Organizational Security<\/mark>.<\/strong> Commvault has implemented organizational measures that limit employees\u2019 access to data based on the scope of their roles and responsibilities and respective access permissions and authorizations. For our security we do not list these organizational security measures publicly. For specific details, please contact us at <a href=\"mailto:SOC@commvault.com\">SOC@commvault.com<\/a>.<\/p>\n\n\n\n<p class=\"\"><strong>3.5 <mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-crocus-color\">Encryption<\/mark>. <\/strong>The SaaS Solution uses firewalls, zero-trust access controls, and encryption algorithms and keys to protect Customer Data, both in transit and at rest, and web-based access to account management interfaces by Commvault employees. Commvault uses end-to-end encryption of screen sharing for remote access, support, and real time communication. Integrity checks are conducted to monitor the completeness and correctness of the transfer of Customer Data.<\/p>\n\n\n\n<p class=\"\"><strong>3.6 <mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-crocus-color\">Personal Data<\/mark>. <\/strong>Commvault has implemented an authorization policy for the input of personal data into memory, as well as the reading, alteration, and deletion of stored personal data including documentation and logging of material changes to account data and settings; segregation and protection of all stored personal data via database schemas, logical access controls and encryption; utilization of user identification credentials; physical security of data processing facilities; and session time outs.<\/p>\n\n\n\n<p class=\"\"><strong>3.7 <mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-crocus-color\">Restricted Access<\/mark>. <\/strong>Commvault restricts access to Customer Data by individual appointment of system administrators; registration of access logs to the infrastructure securely retained; regular audits of system activity to assess compliance with assigned tasks, data controller\u2019s instructions, and applicable laws, and maintenance of system administrators\u2019 identification details (e.g. name, surname, function or organizational area) and responsibilities. \u00a0<\/p>\n\n\n\n<p class=\"\"><strong>3.8. <mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-crocus-color\">Business Continuity &amp; Disaster Recovery Plan<\/mark>. <\/strong>Commvault has implemented measures to ensure Customer Data is protected from accidental destruction or loss by creating a business continuity and disaster recovery plan, maintaining global and redundant infrastructure, rapid failover capability, and full capacity disaster recovery sites and testing of disaster recovery centers.<\/p>\n\n\n\n<p class=\"\"><strong>3.9. <mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-crocus-color\">Security Notification<\/mark>. <\/strong>Unless otherwise required by law, regulation or law enforcement, Commvault agrees to notify Customer of any Security Breach of Customer Data within seventy-two (72) hours following Commvault\u2019s discovery thereof.\u00a0 \u201cSecurity Breach\u201d means an accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to unencrypted personal data.<\/p>\n<\/div>\n<\/div>\n\n\n\n<p class=\"\"><br><br><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Security Terms SaaS Solution meets the confidentiality, integrity, and availability standards set by government agencies and enterprises. &nbsp;For more information on SaaS Solution\u2019s best-in-class security and compliance program, please visit our Trust Center. Any terms not defined have the same definition ascribed to them in the Terms. 1. Regulatory Compliance Commvault\u2019s Customers know their data! [&hellip;]<\/p>\n","protected":false},"author":85,"featured_media":494365,"parent":56418,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_custom_css":"","_custom_js_footer":"","_page_background_color":"","_remove_from_search":false,"_dark_mode":false,"_light_footer_mode":false,"_sidebar_form":{"id":"","name":"","cta":"","redirect":""},"_alert_notification_bar":{"show":true,"bg_color":"","content":"","call_to_action_label":"","call_to_action_link":""},"_footer_cta":{"show":false,"title":"","subtitle":"","cta_text":"","cta_link":"","background":{"id":0,"url":""}},"_cmv_customer_logo":{"id":0,"url":""},"_badge_descriptions":"","_featured_resource":"","_featured_resource_type":"","_custom_title":"","_featured_case_study":"","_footer_case_study":"","_upcoming_webinars_title":"","_upcoming_techdemos_title":"","_template_config":"","_lead_capture_hide_menu":false,"_lead_capture_cta_text":"","_lead_capture_cta_link":"","i18n_hreflangs":"","footnotes":""},"cmv_group":[],"cmv_structure_scheme":[],"class_list":{"0":"post-504299","1":"page","2":"type-page","3":"status-publish","4":"has-post-thumbnail","6":"entry"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v23.0 (Yoast SEO v23.0) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Security Terms | Legal | Commvault<\/title>\n<meta name=\"description\" content=\"Find out more about the security terms used by Commvault.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.commvault.com\/legal\/security-terms\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security Terms\" \/>\n<meta property=\"og:description\" content=\"Find out more about the security terms used by Commvault.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.commvault.com\/legal\/security-terms\" \/>\n<meta property=\"og:site_name\" content=\"Commvault - English - United States\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Commvault\/\" \/>\n<meta property=\"article:modified_time\" content=\"2023-12-08T17:00:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.commvault.com\/wp-content\/uploads\/2023\/11\/MicrosoftTeams-image-45.jpg?quality=80\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@commvault\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Security Terms | Legal | Commvault","description":"Find out more about the security terms used by Commvault.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.commvault.com\/legal\/security-terms","og_locale":"en_US","og_type":"article","og_title":"Security Terms","og_description":"Find out more about the security terms used by Commvault.","og_url":"https:\/\/www.commvault.com\/legal\/security-terms","og_site_name":"Commvault - English - United States","article_publisher":"https:\/\/www.facebook.com\/Commvault\/","article_modified_time":"2023-12-08T17:00:30+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/www.commvault.com\/wp-content\/uploads\/2023\/11\/MicrosoftTeams-image-45.jpg?quality=80","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@commvault","twitter_misc":{"Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.commvault.com\/legal\/security-terms","url":"https:\/\/www.commvault.com\/legal\/security-terms","name":"Security Terms | Legal | Commvault","isPartOf":{"@id":"https:\/\/commvault-new.go-vip.net\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.commvault.com\/legal\/security-terms#primaryimage"},"image":{"@id":"https:\/\/www.commvault.com\/legal\/security-terms#primaryimage"},"thumbnailUrl":"https:\/\/www.commvault.com\/wp-content\/uploads\/2023\/11\/MicrosoftTeams-image-45.jpg?quality=80","datePublished":"2023-12-08T17:00:11+00:00","dateModified":"2023-12-08T17:00:30+00:00","description":"Find out more about the security terms used by Commvault.","breadcrumb":{"@id":"https:\/\/www.commvault.com\/legal\/security-terms#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.commvault.com\/legal\/security-terms"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.commvault.com\/legal\/security-terms#primaryimage","url":"https:\/\/www.commvault.com\/wp-content\/uploads\/2023\/11\/MicrosoftTeams-image-45.jpg?quality=80","contentUrl":"https:\/\/www.commvault.com\/wp-content\/uploads\/2023\/11\/MicrosoftTeams-image-45.jpg?quality=80","width":1200,"height":628},{"@type":"BreadcrumbList","@id":"https:\/\/www.commvault.com\/legal\/security-terms#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.commvault.com\/"},{"@type":"ListItem","position":2,"name":"Commvault Legal","item":"https:\/\/www.commvault.com\/legal"},{"@type":"ListItem","position":3,"name":"Security Terms"}]},{"@type":"WebSite","@id":"https:\/\/commvault-new.go-vip.net\/#website","url":"https:\/\/commvault-new.go-vip.net\/","name":"Commvault - English - United States","description":"","publisher":{"@id":"https:\/\/commvault-new.go-vip.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/commvault-new.go-vip.net\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/commvault-new.go-vip.net\/#organization","name":"Commvault","url":"https:\/\/commvault-new.go-vip.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/commvault-new.go-vip.net\/#\/schema\/logo\/image\/","url":"https:\/\/www.commvault.com\/wp-content\/uploads\/2024\/03\/logo-commvault-horizontal.jpg?quality=80","contentUrl":"https:\/\/www.commvault.com\/wp-content\/uploads\/2024\/03\/logo-commvault-horizontal.jpg?quality=80","width":1200,"height":628,"caption":"Commvault"},"image":{"@id":"https:\/\/commvault-new.go-vip.net\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Commvault\/","https:\/\/x.com\/commvault","https:\/\/www.instagram.com\/commvault\/","https:\/\/www.linkedin.com\/company\/commvault","https:\/\/www.youtube.com\/user\/commvault","https:\/\/en.wikipedia.org\/wiki\/Commvault"]}]}},"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/pages\/504299","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/users\/85"}],"replies":[{"embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/comments?post=504299"}],"version-history":[{"count":3,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/pages\/504299\/revisions"}],"predecessor-version":[{"id":515607,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/pages\/504299\/revisions\/515607"}],"up":[{"embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/pages\/56418"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/media\/494365"}],"wp:attachment":[{"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/media?parent=504299"}],"wp:term":[{"taxonomy":"cmv_group","embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/cmv_group?post=504299"},{"taxonomy":"cmv_structure_scheme","embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/cmv_structure_scheme?post=504299"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}