Enviance Receives SAS 70 Type II Certification

Enviance announced that it has been certified as compliant with the Statement on Auditing Standards No. 70: Service Organizations (SAS 70) Type II, the highest level of security and internal control certification for software companies.

The Sarbanes-Oxley financial reporting act, the Gramm-Leach-Bliley privacy act, the Health Insurance Portability and Accountability Act, and California’s SB1386 notification act all require that companies take steps to assure protection of sensitive data. SAS 70 sets the standards against which auditors assess the internal controls of a service organization. Companies that attain SAS 70 Type II certification do so only after thorough, third party audit of the company’s internal control activities, including control over information technology and related processes.

"SAS 70 Type II certification tells the world that independent third party auditors have confirmed that our software services, which are vital for greenhouse gas and environmental, health and safety compliance management, are secure and reliable,” stated Lawrence Goldenhersh, president and CEO of Enviance. “In this era of fast moving technology innovation, customers should demand concrete evidence substantiating their provider’s claims that customer data is safe and is protected by well developed, highly controlled process. This SAS 70 Type II certification provides our customers, which include global leaders in the utilities, energy, chemical, and pharmaceutical industries, with confirmation that Enviance continues to operate at the highest level of professional excellence.”