Access to infrastructure is controlled per account, not shared broadly by default.
Applied to infrastructure-level access.
Particularly relevant for DHS PracticeCloud, where firm-admin and staff roles are scoped separately.
Infrastructure under management is monitored on an ongoing basis.
Scheduled backups with a documented recovery approach — see Backup & Disaster Recovery.
Migrations run on a planned cutover window rather than an unmanaged switch.
DHS takes the confidentiality, integrity, availability and privacy of customer data seriously. Security controls are designed to protect customer data — not to promise a risk that doesn’t exist. DHS does not claim its infrastructure is “100% secure” or that any system is immune to compromise; the goal is layered, well-managed defence, not an absolute guarantee.
Infrastructure is provisioned and hardened with security as a design input, not an add-on applied after the fact.
Access to infrastructure is scoped per account and per role, with multi-factor authentication applied at the infrastructure level.
Firewalls and network-level controls sit between customer workloads and the wider internet.
Infrastructure under management is monitored on an ongoing basis, not checked only when something breaks.
Scheduled backup cycles run against a documented recovery approach — see Immutable Backup below for how recovery points are additionally protected.
Controls are designed to protect the confidentiality, integrity and availability of customer data throughout its handling.
Data confidentiality is protected by contract, and access to customer data is limited to what operating the service requires.
Layered access and activity controls are aimed at keeping infrastructure access limited to people who are supposed to have it.
Backup, monitoring and a documented recovery approach work together so an infrastructure failure doesn't become a business outage.
DHS’s backup architecture includes immutable backup controls. Immutable backups help protect recovery points from unauthorized modification or deletion during the defined immutability period, providing an additional layer of protection against ransomware and destructive attacks.
Immutable backup is one layer of a broader backup and disaster-recovery approach — it reduces the risk that a ransomware event can also destroy the backups needed to recover, but it does not by itself guarantee recovery or eliminate ransomware risk. See Backup & Disaster Recovery for how it fits into the wider recovery approach.
Tamper-Proof Backups
Protection from Ransomware
Reliable Recovery Points
Stronger Data Security
DHS Cloud Services is the extended technology arm of our parent company, Digital Hub Solution.
