end to end paperless processes

kbee.docs Security Overview

Multiple layers of industry-leading security for data
protection, information management and regulatory
compliance.

PRIVACY COMMITMENT
The client is the owner of the information and can always get it back. We have no
rights to your information if you leave the service, and we permanently remove
the data after the client leaves the service.

DATA CENTERS
kbee.docs servers are located in SAS 70 or ISO 27001 certified Datacenters.

Datacenters maintain multiple power feeds, fiber links, dedicated generators, and
battery backup. They are built from industry-leading hardware and equipment,
ensuring the highest level of performance, reliability, and interoperability.

SERVER SECURITY
The system has one or more layers of firewalls to access the servers. Our engi-
neering staff checks the Operating System and installs security patches perdiodi-
cally.

Monitoring software checks network and system activities for malicious activities
or policy violations and produces reports.

DATA TRANSFER SECURITY

All user data transfers use a 256-bit SSL connection. The encrypted data is up-
loaded to the service over a mutually authenticated SSL connection to further
preserve confidentiality.

NOVAMENS. kbee.docs Security Overview Page 1 of 2

 end to end paperless processes

APPLICATION AND DATABASE SECURITY

All users are authenticated using username and password credentials.
The service does not store user passwords.

Audit Trails
kbee.docs keeps audit trails of all events and changes to the contents, as well as
versions of the contents. Authorized client´s users can access, browse and search
the system logs.

Rights Management
kbee.docs clients use the service´s versatile Security module to assign permissions
to each user to read, write, publish, delete, archive certain types of contents,
monitor and audit processes, reassing tasks, etcetera.

Database encryption
We offer optional service to encrypt the client database on our servers.

ELECTRONIC & DIGITAL SIGNATURE

kbee.docs supports electronic signature and the PKI/X509 standard for digital
signature.

DATA REPLICATION
The service has on-line data replication, all contents are stored in several disks on
2 or more servers.

REGULATORY COMPLIANCE
kbee.docs is designed to be compliant with the most demanding regulatory re-
quirements, among them FDA 21 CRF Part 11, HIPAA recommendations, ANMAT
5330, 1067/08, Res. 1490/2007, and has been used by our clients to certify norms
such as ANVISA and ISO9000.

NOVAMENS. kbee.docs Security Overview Page 2 of 2