Security

Question: What security measures are in place to protect from security or data breaches?

Answer: All our data are encrypted at rest, using the AES256 encryption schema. Accessing data is allowed only to selected and authenticated personnel having a specific role. Access to data is registered in audit logs and retained for at least 30 days. Access to data is shielded by an intrusion detection system. It detects network-based threats such as malware, spyware, and command-and-control attacks and generates network-based threat data for threat investigation and correlation

Question: What is your security infrastructure?

Answer: Connected-Stories NEXT uses a combination of clouds and open source software, rather than relying on a single service provider or closed technology stack for their needs. It is totally designed and implemented by the internal R&D team, rather than by aggregation of products collected through corporate acquisitions. The cloud gives us a faster way to technically meet their customer needs. Our open cloud transforms the way our clients operate their business, instilling freedom in how they innovate and drive differentiated customer experiences.

Question: Where are your servers located?

Answer: We have servers located in Milan, Frankfurt, Virginia, Los Angeles, Dallas, and Singapore and we can open an instance with Google Cloud in a matter of hours in 200+ countries covering every geographic area for planetary scalability.

Question: What database tech do you use?

Answer: Google Big Query and all the other services offered by the Google Cloud Platform

Question: What CDN (content distribution network) do you use?

Answer: Akamai

Question: Are your servers securely housed?

Answer: Yes, we rely on best-in-class tech solutions and architecture completely in the cloud.

Question: What is the impact on the customer in the event of an SLA breach?

Answer: Serious problems may arise only if a specific service is unavailable in two regions or more. In case of a single region fall, our service is still available with little latency increase. If Connected-Stories NEXT, for any reason, is made unavailable to correctly render its ad delivery services, customers have the right to receive credits. Any credits owed by Connected-Stories NEXT to CUSTOMER pursuant to Section 1 above will be calculated as follows: the percentage set forth in the table below multiplied by the aggregate amount paid or payable by CUSTOMER to HYPERTV for the month in which the credit accrued: Ad Serving Availability 99.50-99.89% Service Credits 10%, Ad Serving Availability 99.00-99.49% Service Credits 15%, Ad Serving Availability 98.50-98.99% Service Credits 20%, Ad Serving Availability 98.00-98.49% Service Credits 25%, Ad Serving Availability 97.99% or fewer Service Credits 30%.

Question: What’s your internal monitoring & alerting tech and process?

Answer: We monitor each cloud service we use; alarms on service unavailability are sent on several channels (slack, email, etc. ) to the personnel responsible for the Connected-Stories NEXT tech infrastructure. In addition to each service, also the application is being constantly monitored in order to receive alarms also in case of connected stories software failures.

Question: Are you bound by any SLA on your tech platform? Describe. 

Answer: Yes, the majority of our master service agreements include a technical SLA. Details: Connected-Stories NEXT ensures that its Services are Available for CUSTOMER’s use at least 99.9% of the time, calculated on a calendar monthly basis. “Platform Availability” will be measured each month by adding the total number of minutes in such month that the Connected-Stories NEXT Platform delivered or was available to deliver Content in response to requests for such Content from CUSTOMER’s ad server divided by the total number of minutes in such month that the Connected-Stories NEXT Platform should have been available to deliver Content. The Connected-Stories NEXT Platform will be considered unavailable if, for instance, no Content is being delivered in response to a request for Content from CUSTOMER’s or its vendors’ ad servers, or Content does not display properly to end users due to any cause within Connected-Stories NEXT reasonable control. If Platform Availability falls below 99.9% in any month, then CUSTOMER will receive a credit. Connected-Stories NEXT will acknowledge and respond to issues according to the Severity Level of the reported Issue. Connected-Stories NEXT NEXT NEXT NEXT will use best efforts to correct the reported error(s) consistent with the Severity Level of the issue, as follows: 

Severity 1) critical business impact on CUSTOMER’s operations; Services are not usable.

Response Time: within 30 minutes. Updates: every hour. Reasonable workaround within 6 hours, final resolution within 24 hours.

Severity 2) significant business impact where Services are usable but is restricted; loss of functionality.

Response Time: within 2 hours. Updates: every 4 hours. Reasonable workaround within 12 hours, final resolution within 48 hours.

Severity 3) some business impact where Services are usable with less significant or non- critical features unavailable. Response Time: within 1 business day. Updates: every 48 hours. Reasonable workaround within 5 business days, final resolution within 10 business days.

Severity 4) minimal business impact where the Issue is causing little or no impact (e.g., questions, etc.). Response Time: 2 business days. Updates: every 5 business days.