For this reason:
The Equipment Room is the area which hosts IT and communications equipment for Cirion and different Customers; therefore, in order to maintain the safety standards, the following safety policies should be followed:
The main goal of the Physical Safety Policy adopted by Cirion is to ensure the physical integrity of the staff and equipment hosted at the Data Centers. The main aspects to be taken into account before an evacuation event are listed below.
Commercial visits or Data Tour will be coordinated with the Account Manager (AM), who will be responsible for the group and must comply with the rules described in 1.1 and 1.2 of this document.
If the commercial visit is made by a Cirion customer, the authorized contact person will be responsible for their group and enforce the standards described in 1.1 and 1.2 hereunder.
Customer’s authorized contacts are Customer’s employees, or third parties authorized to interact with Data Center teams via telephone, e-mail or customer portal to place requests and report incidents about contracted services, according to permission levels.
Upon signing a contract, several instances are activated that enable proper and appropriate delivery of both the contracted solution and the expected service levels.
To meet this objective, the Customer should designate at least one Technical Responsible, who will have the role of “Administrator” and Level 1 – Admin for Data Center in the Customer Portal. Only the individuals assigned to the Customer Portal in the roles of “Administrator” or “Users Manager” will be authorized to perform the Registration, Removal and/or Modification (RRM) of the authorized contacts through the Customer Portal.
The Technical Responsible can designate people to replace him, who will also be identified with the role “Administrator” and Level 1 – Admin for Data Center in the Customer Portal.
Account executives will request that the Customer submit, through reliable documentation, the necessary information to register the Technical Manager:
Further to receiving the complete data from the Technical Manager, Cirion will upload it to the management tools. Once the Customer is operational, the Technical Manager can use the contracted service and add other authorized contacts through the Customer Portal.
Should Customer fail to define a Technical Manager or to use the Customer Portal, they can authorize their Cirion Service Customer Manager and/or Customer Success Manager to update Customer’s authorized contacts in the Customer Portal. Otherwise, it will be considered that the contract signatory fulfills this role. In these cases, the Customer understands and undertakes the responsibility and/or any entailed risk when managing their services.
Registration, Removal and/or Modification (ABM) of the authorized contacts shall be made by contacts registered as “Technical Responsible” (role “Administrator” and Level 1 – Admin for Data Center in the Customer Portal) through the Customer Portal.
Contacts who have more than one level or who will manage more than one account or service can be registered on the Customer Portal.
The minimum data required for registering authorized contacts in the Customer Portal are:
Completing these fields is mandatory.
Details of authorization levels
per contracted service
Level 1 – Admin
Housing/Colocation:
Other Data Center Services
Level 2 – Service Manager
Housing/Colocation:
Other Data Center Services
Nivel 3 – Physical Access to Data Center
Housing/Colocation:
Customer contacts authorized by Level 1 or Level 2 to:
Customer contacts authorized by Level 1 via ticket registration:
Level 4 – Office space
Office Space
Level 5 – Change approval
All Data Center Services:
Every authorization is valid for a maximum of 30 consecutive days. For a new visit to the Data Center, the Customer must repeat the procedure.
In the occasion of a serious failure requiring immediate intervention on the Customer’s equipment located at the Data Center, the request can be sent at any time prior to the visit. This situation does not exempt the Customer from presenting the required documentation mentioned above and to have the updated necessary legal documentation mentioned in this document.
Note: for this reason, it is recommended to have an updated authorized contact list in customer portal and insurance certificates for the countries in which this is needed, since in many countries this insurance coverage expires in 30 days.
To comply with local legislation, the following documents must be published before entering the Data Center:
Mandatory documents for Argentina
For dependent relationship personnel:
For autonomous personnel:
These changes in the process of submitting documents to access the Data Center applies to jobs or activities in racks: Example; installation/uninstallation or configuration of routers, switches, among others.
Activities that involve transportation of equipment in private vehicles or movement of cargo in trucks or forklift vehicles will continue to pass the already known documentation filters, such as: (1) Vehicle coverage policy, (2) Updated vehicle technical verification, (3) Driver’s license and DNI of the driver, (4) ART certificate or personal accident insurance. (5) heavy vehicle operator training certificates, and others that the Cirion EH&S area may require depending on the activity to be carried out in Cirion.
All documentation required for the entry of Personnel must be uploaded to the self-managed platform of EHS LATAM https://contratistas.ehslatam.com/login.php to be validated by the Environment, Safety & Health at Work (EH&S) area. ; the area is the one that controls whether the documentation is current and in order.
It will be the Client’s responsibility to validate that the documentation uploaded on the self-managed platform is approved for entry. If it is rejected, the client will receive a notification from the Environment, Safety & Health at Work (EH&S) area, explaining why the documentation is not in order.
For clients who use the self-managed platform of EHS LATAM for the first time, they must first attend to what is indicated in point 2.2.to receive the username and password that will allow them to enter the platform and upload the respective information. If, once the username and password have been received, the client has concerns or problems, they can download the Instructions that are available on the platform or they can contact the email account: datacenter.cirion@ar.ehslatam.com
Mandatory documents for Peru
For Colombia, Ecuador and Venezuela:
All documentation related to personal Insurance must first be sent for validation by the Department of Health and Safety; see item 8.4. This is the area responsible for controlling whether the documentation is accurate and up to date.
Once the documentation is validated, the Health and Safety department should notify the customer and send it to the areas of security and building access control, as well as Data Center operations, accordingly. In case it is reproved, the Health and Safety department should let the sender know why it doesn’t meet the rules, copying all areas mentioned above.
We remind you that the personal insurance documentation relative to customer personnel and/or contractors and/or providers, should be sent by the customer. The delivery of provider documentation directly to Cirion does not authorize entry of personnel in all customers’ areas. For this reason, providers and contractors should send the documentation beforehand to the customer and the customer is the one who should authorize each and every one of their providers and contractors.
No associate of the client and/or contracted personnel and/or contractor and/or supplier may enter the Data Center to work if the last certificate/insurance presented to Cirion is not valid (does not apply to Brazil and Colombia).
Here is a summary of the points to keep in mind:
Employees’ Insurance Policies and Contracts should include:
Foreign employees’ Insurance Policies and Contracts:
These certificates should include:
Insurance Policies for Personal Accidents for contractors or third parties:
They should have a personal accident policy containing at least the minimum values insured according to the local regulations in effect.
Civil Liability Insurance for Injuries and Damages to third parties:
Policies and payment receipts for Civil Liability Insurance covering lesions and/or damages to third parties caused by the subcontractor while conducting his tasks should be presented, including coverage of material damage or risks caused by materials in their property and/or under their guard or control.
USA and Canada subcontractors must present the “General Liability” certificate for Global Liability in other countries, as appropriate, which should include:
Observation 1: Considering the labor laws in effect, nobody can access the Data Center without the above information.
Observation 2: If the Technical Responsible is one of the individuals accessing the Data Center, he too should include his information.
Observation 3: Individuals entering the Data Center, whether through specific or permanent access, should follow the security policies defined in Item 1 in this document.
The procedure for entry and exit to the Data Center is described below, however, specificities of the legislation of each country are applied, detailed in item 2.2.2
Hosting Customers have no access to the Equipment Room; their mobility is limited to the Customer’s Room in the Data Centers that have one. If physical operation is needed (ex: loading of CDs or tapes) on the equipment supporting their services, this should be requested to and performed by the DOC.
IMPORTANT:
It is recommended that the Authorized Contacts their first visit between 9 am and 7 pm, Mondays through Fridays, in order to manage the corresponding registrations in the Data Center’s security systems.
When an Authorized Contact needs to access the Data Center, they must address the building’s security personnel and identify themselves. Security personnel must:
If contact’s permission level allows them to enter the equipment room, the security guard, or DOC staff should provide the keys for their cage or rack, or the access badges to their private rooms, as appropriate.
When an unauthorized contact must enter the Data Center, a level 1 or 2 Authorized Contact must require specific access for employees or third parties of the Client who are not part of the list of authorized contacts. The request must be made through a formal request to the DOC via Customer Portal or email (item 8.2) with the following information:
To make it easier for all the information necessary for the entry authorization to be sent correctly, the customer can request the DOC for the specific format for this.
The deadline for authorization is up to 48 hours after registration of the request with all the visit data previously informed and the documents required in the item “Personal Insurance Required Documentation”.
The customer is responsible for their unauthorized contacts within the Data Center, in order to ensure that the work and organization standards described in item 1 of this document are respected and followed.
Parking lot service is offered within the premises at no cost for authorized contacts, for comfort purposes, subject to space availability. Cirion may, at any time, deny access to any vehicle for security reasons, even with an entry permit.
Parking requests must be sent 48 hours in advance, only by the Technical Responsible. Necessary information is:
Within 24 hours of receiving the request, the DOC will respond to request by email. Customer should attach and send the aforementioned information as indicated in the section Contact Details.
The Authorized Contact must return keys and access badges to the employee who has provided them.
When leaving the building, the security guard will verify equipment and work material being taken, as detailed in the following section. If material hasn’t been declared, it may only leave after proper authorization by the individual responsible for Data Center Operations.
The following rules apply to Technological Material entering the Data Center on a permanent basis.
The Authorized contact must inform their intention of entering their Housing space with Technological Material by filling out the appropriate equipment entry and exit form, informing the desired entry date, considering that Cirion’s analysis deadline is of 3 business days during business hours, and that the request may be rejected.
The request will be analyzed by Cirion’s technical teams and, once authorized, the entry of equipment may be conducted during all days and hours of the week. Scheduling will effectively occur only after approval. In case the analysis is denied, the request will be cancelled.
This authorization is valid for one week for entry or scheduling of entry; in case this doesn’t occur within this deadline, the ticket will be closed and customer will need to enter another request in case there is any type of installation still to be concluded.
The DOC registers the request through a ticket. To authorize this request, equipment’s power consumption must be verified in order not to exceed hired consumption rate, and documentation must follow the rules below. Once request is analyzed, the DOC must respond by email informing whether equipment entry has been approved or denied.
For Brazil, the Customer shall have the following information:
Tax information for Brazil’s Data Centers:
Company Name: Cirion Technologies do Brasil Ltda.
Av. Eid Mansur, 666 – Pq. São George – Cotia – SP, Cep: 06708-070
CNPJ: 72.843.212/0001-41 or 72.843.212/0006-56
Municipal Registration: 018712–7
State Registration: 278.130.837.119
Company Name: Cirion Technologies do Brasil Ltda.
Av. Pedro II, 329 – São Cristovão – Rio de Janeiro – RJ, Cep: 20941-070
CNPJ: 72.843.212/0002-22
Municipal Registration: 018712–7
State Registration: 278.130.837.119
Company Name: Cirion Technologies do Brasil Ltda.
Rua Semeador, 350 Cidade Industrial – Curitiba – PR, Cep: 81270-050
CNPJ: 72.843.212/0005-75
Municipal Registration: 386.361–9
State Registration: 90170568–21
TAX RETURN – No Tax Returns will be accepted from taxpayers who have failed to issue the Avulsa Tax Notes with the Tax Bureau. Non-taxpayers shall issue a declaration with the recipient’s address and Cirion’s address, detailing the quantity, description, and value. Said statement shall be signed by the company’s legal representative and allow Cirion to issue an entry invoice to regularize the equipment at our offices. The declaration shall state that the materials belong to the issuing company and are being transported for their own use outside their offices.
The Customer shall send the request attaching the aforementioned documents as described in the Contact Details section.
IMPORTANT:
Follow the basic concepts and premises to consider when installing equipment in racks located in Cirion’s equipment rooms as described below:
Compliance with the above items will ensure the proper operation and support of each of your equipment.
Failure to comply with any of the above items may impact the quality of the services without any detriment to Cirion and the client assumes all the risks that merit the omission of the requirements indicated in this item.
If advice for the installation of any equipment is considered necessary by the installer, this must be requested from the Data Center area.
The following rules apply to Technological Material entering the Data Center on a permanent basis.
The Authorized contact must inform their intention of removing Technological Material from their Housing space by filling out the appropriate equipment entry and exit form, informing the desired removal date, considering that Cirion’s analysis deadline is of 3 business days during business hours, and that the request may be rejected.
The request will be analyzed by Cirion’s technical teams and, once authorized, the removal of equipment may be conducted during all days and hours of the week. Scheduling will effectively occur only after approval. In case the analysis is denied, the request will be cancelled.
This authorization will be valid for one week for entry or entry scheduling. Failure to do so within the deadline, the ticket will be closed, and if the installation needs to be restarted, the customer shall file a new request.
The DOC registers the request through a ticket. To authorize this request, equipment’s power consumption must be verified in order not to exceed hired consumption rate, and documentation must follow the rules below. Once request is analyzed, the DOC must respond by email informing whether equipment removal has been approved or denied.
The Customer shall attach and submit the aforementioned information, as stated in the Contact Details section.
For Brazil:
IMPORTANT:
DECLARATION – Cirion does not issue an Equipment Exit Declaration for customers and does not accept the equipment removal without a Fiscal Exit Invoice.
The security guard will check and register the work items brought in by the Customer and check them when the Customer leaves the facilities.
Return Merchandise Authorization (RMA) is a transaction in which the owner of a product sends defective material to the supplier to obtain repair or replacement of the product.
For Brazil: For entry and exit related RMA, Cirion will receive the new equipment to normalize the customer’s environment, however, the damaged equipment will only be released for removal after the normalization of the process in question (Receipt of Customer’s invoice assigned to Cirion) so that an equipment exit invoice can be issued. This process will consider the time of receipt of the Invoice by the customer for relevant tax adjustments. During this period, defective equipment remains installed or inside Cirion premises.
If an internal movement of equipment already installed in their Data Center Housing space is required, the Authorized Contact must inform the DOC of his intention by sending the request with the equipment data and the date on which he wishes move it, and this request may be rejected.
The DOC open the request through a ticket. The request will be analyzed by Cirion’s technical teams, and the equipment’s power consumption to be moved will also be verified in order not to exceed the available rack consumption and, once the request is analyzed, the DOC must respond by e-mail informing whether equipment movement has been approved or denied.
If authorized, the equipment may be moved during all days and hours of the week. Scheduling will effectively take place after Cirion has approved the review. In case the analysis is denied, the request will be closed with its details.
The authorization is valid for one week for the movement or scheduling of the movement; in case this doesn’t occur within this deadline, the ticket will be closed and customer will need to open another request in case there is any type of movement still to be concluded.
IMPORTANT: Customer shall be responsible for managing (receipt, transport, moving, etc.) of equipment (complete or parts thereof), parcels, mail, etc., belonging to them.
After the contracting of the services by the Customer, the order reaches the Delivery team in charge of the implementation and transition of the service.
After the contracting of the services by the Customer, the order reaches the Delivery team in charge of the implementation and transition of the service.
The implementation is coordinated according to the complexity of the contracted services. Those of medium and high complexity comply with all phases of project management and those of low complexity meet only what is necessary to guarantee the delivery of the contracted service within the term.
The implementation of the services contracted by the Customer is done by adopting the project management methodology, based on PMBOK, which is adapted to an IT services environment and led by a Project Manager. These phases and the offered scope are briefly described below.
During this phase, the inputs of the analysis and survey of the requirements of the Customer are taken into account. The Time, Costs and Scope constraints will be evaluated to develop the corresponding Project Management Plan.
During this phase, the project management plan is developed, consisting of:
Risk analysis
Cirion will present the risk analysis in the migration of the data center and will establish control measures to deal with the identified risks.
The risk analysis will contain:
All risk analysis inherent to the project will be aligned, presented and documented during the meetings between Cirion and Customer.
In this phase, the execution of tasks is directed and managed according to the schedule built by the Project Manager, in order to implement the solution as it was framed in the project management plan.
Measurement and monitoring with the objective of guaranteeing compliance with the activities in accordance with the plans of the Project Management Plan, allowing the Project Manager to take corrective actions when necessary.
Once all the planned activities have been completed, the relevant tests and validations have been carried out, the project can be finalized, and the delivery is made to the operations team. At this moment, the Project Manager executes the transfer of knowledge of the environment to the team in charge of the management of the services. In this phase, the acceptance of the services by the Customer is also coordinated.
Cirion provides a Single Point of Contact in each country (see items 8.2 and 8.3) so that its customers can communicate via telephone, email or portal, according to the country where the customer has contracted services.
Currently, organizations depend greatly on their information solutions to meet their goals and business needs. This implies that IT services need to operate in line with the agreed levels of service.
The management team for the Information Technology Services carefully studies the appropriate assignment of the available resources so as to manage them integrally, minimizing drawbacks. The Data Center area provides contact points with 24 x 7 coverage to respond to your concerns and requests.
To support the management of services Cirion uses an IT Service Management System (ITSM) based on ITIL. The ticket is the record that Cirion and the Customer have as a joint means to recognizing the beginning, follow-up and end of the event.
This record has an alphanumeric non-sequential and auto-generated identification that shall be given to the Customer upon registering the occurrence. This number shall be used by the Customer as a unique reference for each subsequent contact related to the registered call or email request.
Incident Management is responsible for restoring the normal operation of the services as quickly as possible and minimizing the adverse impact to the critical operations of its Customers, thus ensuring that the best possible level of quality of service and availability is maintained.
The process of incident management is composed of the following subprocesses:
To adequately register, evaluate and track incidents, Cirion will request the following data from the Customer:
Incidents may be reported by the corresponding Authorized Contacts. Cirion will validate their identity.
Cirion’s representatives give the Customer a ticket number and initiate technical diagnostics tasks, thus ending the contact by phone if the incident was reported in this manner. If, as a result of the diagnosis, Cirion needs to communicate with the Customer to complete the activity, the person who requested the ticket shall be contacted.
Tickets in the services management system are entered both when the Customer communicates to report a failure, and when the situation is detected by Cirion.
Incidents will be given priority in accordance to their urgency and level of impact on Customer’s services.
An incident is defined as “Major” when it causes total, partial, or degrades a service provided by Cirion, that impacts one or more customer’s critical business operations. In this case, Cirion and the customer evaluate the impact of this incident and determine its criticality.
In case there is a proactive detection of failures, during the monitoring process of the service, Cirion personnel will open a ticket. If necessary, the Technical Responsible will be contacted for more information.
Start time for the failure registered in the ticket is the moment in which Cirion and customer establish that the service has stopped functioning according to the previously established conditions.
Cirion determines, in conjunction with customer, when the service conditions have returned to the ones previously agreed and this information will be registered in the ticket as solved, thus defining the incident’s resolution time.
The total duration of failure (TDF) is calculated as follows:
TDF = Time of resolution – Start time
The ticket will be considered closed only when there are no more pending issues between Cirion and the customer and when both parties agree on the resolution of the incident. In some cases, a solved ticket may remain open until its monitoring is finalized.
Once the incident has been solved, confirmation regarding the appropriate functioning of service is requested from customer and the ticket is closed. If confirmation is not received after 72 hours, the ticket will be automatically closed.
The Service Request Management is responsible for managing the life cycle of the Customer’s requests. They are standardized activities necessary for the administration of services. It is usually handled by the first level, because it is a request that does not cause impact or is low risk.
The following definition has been established for a low risk request / order that:
The process of Service Request Management is composed of the following subprocesses:
Problem Management seeks to identify the root cause of incidents, document and report known errors and initiate actions to improve or correct the situation. Problem management has reactive and proactive aspects.
The reactive aspect is related to the solution of problems in response to one or more incidents that have occurred, this means that an unplanned interruption of a service or a reduction in the quality of a service is categorized as an incident that may be the entry to a reactive problem record.
The proactive aspect is related to the identification and solution of known problems and errors before the incidents occur. This can be done through trend analysis based on compilations of event data, history of problems or incidents without relevance.
The problem management process consists of the following subprocesses:
Maintenance duties and other tasks are performed in accordance to a Change Enablement practice.
Customers will be informed about programmed events which, based on a risk evaluation, may imply on impacts to their services. In such cases, within reason, a window of time shall be agreed upon to perform the maintenance tasks.
Change Enablement controls the life cycle of all modifications, allowing the realization of beneficial alterations and with the minimum of interruption of the Customer’s services. Changes must be evaluated, prioritized, planned, authorized, implemented, tested and documented, guaranteeing a controlled environment and minimizing negative impacts in productive environments.
The Change Enablement process is composed of the following subprocesses:
CAB meetings
Cirion carry out CAB meetings every Tuesday and Thursday at 4:30 p.m. Brazil time.
After the change approval in the CAB, the specialist sends an e-mail to the Customer requesting its formal approval. This approval by the Customer must be made by e-mail up to one hour before the start of the change to enable the release in the service management tool.
Cirion manages infrastructure services (servers, software or service components), applying a change management process and using a tool to support it.
The types of changes applied can be:
Type
Features
Normal Change
Requires planning, impact and risk analysis, CAB and Customer approval.
Standard Change
Typified, modeled, low risk and pre-approved by CAB and requires Customer approval.
Emergency Change
Service interrupted or about to interrupt, change of normal type, but of immediate execution, late prepare documentation, could be done without previous tests, ECAB and Customer approves.
The objective is to establish the process to manage risk effectively and aligned with the strategic objectives of the business, to take advantage of potential opportunities and reduce exposure to adverse effects.
It is applied to the risks associated with the business objectives within the scope of the Integrated Management System (SIG). Project risk management is excluded since it is contemplated in its procedure and the risks that affect business continuity at the macro level that will be addressed in BCM management.
Scope plans:
Risk assessment involves:
Risk treatment involves:
Communication and consultation:
Record and report:
Monitoring and review:
Below is the escalation matrix for Data Center services to be used in the event of incidents.
Please note the following table with the recommended escalation rules based on the criticality of the incident and remember that the process starts with the registration of a ticket according to point 6.1 Incident Management of this document.
Cirion has a policy of not rejecting an escalation request in critical situations.
Escalation Level
Elapsed Time
Level 1
Level 2
Level 3
Level 4
May be contacted when minimum required SLA is exceeded or in extremely critical cases.
Exclusive information for Clients, available on the Cirion Client Portal.
According to the services hired, it is possible to access the corresponding reports online.
To access these reports, the Customer receives a username and password. The Customer should contact their Service Manager if there are issues accessing the Portal.
Online reports for Data Center services are found in the following site:
>On the menu select Tools >Reports > Data Center Reports
If you still do not have a username and/or password to access the portal, or are not familiar with its navigation, please contact your Service Manager or send an email to:
Country
DATA CENTERS
ARGENTINA
Buenos Aires (BUE1)
ARTIGAS
Av. del Campo 1301, CP C1427APA
Córdoba (COR1)
Av. Velez Sarfield 4445, CP X5016GCF
Mendoza (MEN1)
Carril Rodriguez Peña 2331, CP M5501ETK
Rosario (ROS1)
Av. Circunvalación 25 de Mayo 1545 Bis, CP S2000
BRASIL
Rio de Janeiro (RIO1)
Av. Pedro II, 329, Quinta da boa Visita, CEP 20941-070
São Paulo (SAO1)
Av. Eid Mansur, 666, Parque Sao George, Rodovia Raposo Tavares, KM 25, CEP 06708-070
Curitiba (CUR1)
Rua do Semeador, 350 – CEP 81270-050
CHILE
Santiago (SAN1)
Sta. Marta de Huechuraba, 6951, Huechuraba
COLOMBIA
Bogotá (BOG1)
SUBA
Calle 127 – 87-51, Bogotá
Bogota (BOG2)
COL XV
Carrera 68 169A-73, Bogotá
Cali (CAL1)
CALI
Avenida 6B # 25AN-19, Cali
ECUADOR
Quito (QUI2)
Data Center Quito
Calle Alonso López s/n y Calle Juan Barrezueta, Quito
Quito (QUI1)
Telepuerto Quito
Calle Juan Diaz, 37-111, – Urbanización Iñaquito Alto, Quito
Guayaquil (GUA1)
Parque Tecnológico ESPOL
La Prosperina. Guayaquil
MEXICO
Ciudad de México (MEX1)
Calle Lago Zurich 96A, Granada, CDMX
PERÚ
Lima (LIM1)
Av. Manuel Olguín #395, Surco, Lima CP Lima33
VENEZUELA
Caracas (CAR1)
Calle 7 – La Urbina – Caracas 1070
URL
Description
Country
Applies to the creation of requests and / or communication of incidents for all hired services, generation of reports when appropriate and other functionalities for the management of services.
Applies for all countries
Country
Portal/E-Mail
COLOMBIA
VENEZUELA
Región
CARIBE & LATAM
The current certifications of ISO 9001, 14001, BS OHSAS 18001, 20000-1 and 27001 are available on the following page www.certipedia.com.
Click on the Certified Management Systems and Services of Companies option, complete with “Cirion” to perform the search.
Our Data Centers are PCI-DSS compliant and AICPA SOC 1, SOC 2 and SOC 3 standards.
Cirion is focused on offering a robust and resilient infrastructure certified by the Uptime Institute, which are available on the following page: https://uptimeinstitute.com/tier-certification/tier-certification-list
Cirion is committed to a sustainable business model, aligned with corporate values and business integrity standards. In our Sustainability Report, you will find all the information about our sustainable practices and our progress on environmental, social and governance (ESG), which can be found on Cirion’s website.
Equipment Room: safe area with a controlled environment to host IT and communications equipment which are part of the service.
DOC: Data Center Operations Center.
For this reason:
The Equipment Room is the area which hosts IT and communications equipment for Cirion and different Customers; therefore, in order to maintain the safety standards, the following safety policies should be followed:
The main goal of the Physical Safety Policy adopted by Cirion is to ensure the physical integrity of the staff and equipment hosted at the Data Centers. The main aspects to be taken into account before an evacuation event are listed below.
Commercial visits or Data Tour will be coordinated with the Account Manager (AM), who will be responsible for the group and must comply with the rules described in 1.1 and 1.2 of this document.
If the commercial visit is made by a Cirion customer, the authorized contact person will be responsible for their group and enforce the standards described in 1.1 and 1.2 hereunder.
Customer’s authorized contacts are Customer’s employees, or third parties authorized to interact with Data Center teams via telephone, e-mail or customer portal to place requests and report incidents about contracted services, according to permission levels.
Upon signing a contract, several instances are activated that enable proper and appropriate delivery of both the contracted solution and the expected service levels.
To meet this objective, the Customer should designate at least one Technical Responsible, who will have the role of “Administrator” and Level 1 – Admin for Data Center in the Customer Portal. Only the individuals assigned to the Customer Portal in the roles of “Administrator” or “Users Manager” will be authorized to perform the Registration, Removal and/or Modification (RRM) of the authorized contacts through the Customer Portal.
The Technical Responsible can designate people to replace him, who will also be identified with the role “Administrator” and Level 1 – Admin for Data Center in the Customer Portal.
Account executives will request that the Customer submit, through reliable documentation, the necessary information to register the Technical Manager:
Further to receiving the complete data from the Technical Manager, Cirion will upload it to the management tools. Once the Customer is operational, the Technical Manager can use the contracted service and add other authorized contacts through the Customer Portal.
Should Customer fail to define a Technical Manager or to use the Customer Portal, they can authorize their Cirion Service Customer Manager and/or Customer Success Manager to update Customer’s authorized contacts in the Customer Portal. Otherwise, it will be considered that the contract signatory fulfills this role. In these cases, the Customer understands and undertakes the responsibility and/or any entailed risk when managing their services.
Registration, Removal and/or Modification (ABM) of the authorized contacts shall be made by contacts registered as “Technical Responsible” (role “Administrator” and Level 1 – Admin for Data Center in the Customer Portal) through the Customer Portal.
Contacts who have more than one level or who will manage more than one account or service can be registered on the Customer Portal.
The minimum data required for registering authorized contacts in the Customer Portal are:
Completing these fields is mandatory.
Details of authorization levels
per contracted service
Level 1 – Admin
Housing/Colocation:
Other Data Center Services
Level 2 – Service Manager
Housing/Colocation:
Other Data Center Services
Nivel 3 – Physical Access to Data Center
Housing/Colocation:
Customer contacts authorized by Level 1 or Level 2 to:
Customer contacts authorized by Level 1 via ticket registration:
Level 4 – Office space
Office Space
Level 5 – Change approval
All Data Center Services:
Every authorization is valid for a maximum of 30 consecutive days. For a new visit to the Data Center, the Customer must repeat the procedure.
In the occasion of a serious failure requiring immediate intervention on the Customer’s equipment located at the Data Center, the request can be sent at any time prior to the visit. This situation does not exempt the Customer from presenting the required documentation mentioned above and to have the updated necessary legal documentation mentioned in this document.
Note: for this reason, it is recommended to have an updated authorized contact list in customer portal and insurance certificates for the countries in which this is needed, since in many countries this insurance coverage expires in 30 days.
To comply with local legislation, the following documents must be published before entering the Data Center:
Mandatory documents for Argentina
For dependent relationship personnel:
For autonomous personnel:
These changes in the process of submitting documents to access the Data Center applies to jobs or activities in racks: Example; installation/uninstallation or configuration of routers, switches, among others.
Activities that involve transportation of equipment in private vehicles or movement of cargo in trucks or forklift vehicles will continue to pass the already known documentation filters, such as: (1) Vehicle coverage policy, (2) Updated vehicle technical verification, (3) Driver’s license and DNI of the driver, (4) ART certificate or personal accident insurance. (5) heavy vehicle operator training certificates, and others that the Cirion EH&S area may require depending on the activity to be carried out in Cirion.
All documentation required for the entry of Personnel must be uploaded to the self-managed platform of EHS LATAM https://contratistas.ehslatam.com/login.php to be validated by the Environment, Safety & Health at Work (EH&S) area. ; the area is the one that controls whether the documentation is current and in order.
It will be the Client’s responsibility to validate that the documentation uploaded on the self-managed platform is approved for entry. If it is rejected, the client will receive a notification from the Environment, Safety & Health at Work (EH&S) area, explaining why the documentation is not in order.
For clients who use the self-managed platform of EHS LATAM for the first time, they must first attend to what is indicated in point 2.2.to receive the username and password that will allow them to enter the platform and upload the respective information. If, once the username and password have been received, the client has concerns or problems, they can download the Instructions that are available on the platform or they can contact the email account: datacenter.cirion@ar.ehslatam.com
Mandatory documents for Peru
For Colombia, Ecuador and Venezuela:
All documentation related to personal Insurance must first be sent for validation by the Department of Health and Safety; see item 8.4. This is the area responsible for controlling whether the documentation is accurate and up to date.
Once the documentation is validated, the Health and Safety department should notify the customer and send it to the areas of security and building access control, as well as Data Center operations, accordingly. In case it is reproved, the Health and Safety department should let the sender know why it doesn’t meet the rules, copying all areas mentioned above.
We remind you that the personal insurance documentation relative to customer personnel and/or contractors and/or providers, should be sent by the customer. The delivery of provider documentation directly to Cirion does not authorize entry of personnel in all customers’ areas. For this reason, providers and contractors should send the documentation beforehand to the customer and the customer is the one who should authorize each and every one of their providers and contractors.
No associate of the client and/or contracted personnel and/or contractor and/or supplier may enter the Data Center to work if the last certificate/insurance presented to Cirion is not valid (does not apply to Brazil and Colombia).
Here is a summary of the points to keep in mind:
Employees’ Insurance Policies and Contracts should include:
Foreign employees’ Insurance Policies and Contracts:
These certificates should include:
Insurance Policies for Personal Accidents for contractors or third parties:
They should have a personal accident policy containing at least the minimum values insured according to the local regulations in effect.
Civil Liability Insurance for Injuries and Damages to third parties:
Policies and payment receipts for Civil Liability Insurance covering lesions and/or damages to third parties caused by the subcontractor while conducting his tasks should be presented, including coverage of material damage or risks caused by materials in their property and/or under their guard or control.
USA and Canada subcontractors must present the “General Liability” certificate for Global Liability in other countries, as appropriate, which should include:
Observation 1: Considering the labor laws in effect, nobody can access the Data Center without the above information.
Observation 2: If the Technical Responsible is one of the individuals accessing the Data Center, he too should include his information.
Observation 3: Individuals entering the Data Center, whether through specific or permanent access, should follow the security policies defined in Item 1 in this document.
The procedure for entry and exit to the Data Center is described below, however, specificities of the legislation of each country are applied, detailed in item 2.2.2
Hosting Customers have no access to the Equipment Room; their mobility is limited to the Customer’s Room in the Data Centers that have one. If physical operation is needed (ex: loading of CDs or tapes) on the equipment supporting their services, this should be requested to and performed by the DOC.
IMPORTANT:
It is recommended that the Authorized Contacts their first visit between 9 am and 7 pm, Mondays through Fridays, in order to manage the corresponding registrations in the Data Center’s security systems.
When an Authorized Contact needs to access the Data Center, they must address the building’s security personnel and identify themselves. Security personnel must:
If contact’s permission level allows them to enter the equipment room, the security guard, or DOC staff should provide the keys for their cage or rack, or the access badges to their private rooms, as appropriate.
When an unauthorized contact must enter the Data Center, a level 1 or 2 Authorized Contact must require specific access for employees or third parties of the Client who are not part of the list of authorized contacts. The request must be made through a formal request to the DOC via Customer Portal or email (item 8.2) with the following information:
To make it easier for all the information necessary for the entry authorization to be sent correctly, the customer can request the DOC for the specific format for this.
The deadline for authorization is up to 48 hours after registration of the request with all the visit data previously informed and the documents required in the item “Personal Insurance Required Documentation”.
The customer is responsible for their unauthorized contacts within the Data Center, in order to ensure that the work and organization standards described in item 1 of this document are respected and followed.
Parking lot service is offered within the premises at no cost for authorized contacts, for comfort purposes, subject to space availability. Cirion may, at any time, deny access to any vehicle for security reasons, even with an entry permit.
Parking requests must be sent 48 hours in advance, only by the Technical Responsible. Necessary information is:
Within 24 hours of receiving the request, the DOC will respond to request by email. Customer should attach and send the aforementioned information as indicated in the section Contact Details.
The Authorized Contact must return keys and access badges to the employee who has provided them.
When leaving the building, the security guard will verify equipment and work material being taken, as detailed in the following section. If material hasn’t been declared, it may only leave after proper authorization by the individual responsible for Data Center Operations.
The following rules apply to Technological Material entering the Data Center on a permanent basis.
The Authorized contact must inform their intention of entering their Housing space with Technological Material by filling out the appropriate equipment entry and exit form, informing the desired entry date, considering that Cirion’s analysis deadline is of 3 business days during business hours, and that the request may be rejected.
The request will be analyzed by Cirion’s technical teams and, once authorized, the entry of equipment may be conducted during all days and hours of the week. Scheduling will effectively occur only after approval. In case the analysis is denied, the request will be cancelled.
This authorization is valid for one week for entry or scheduling of entry; in case this doesn’t occur within this deadline, the ticket will be closed and customer will need to enter another request in case there is any type of installation still to be concluded.
The DOC registers the request through a ticket. To authorize this request, equipment’s power consumption must be verified in order not to exceed hired consumption rate, and documentation must follow the rules below. Once request is analyzed, the DOC must respond by email informing whether equipment entry has been approved or denied.
For Brazil, the Customer shall have the following information:
Tax information for Brazil’s Data Centers:
Company Name: Cirion Technologies do Brasil Ltda.
Av. Eid Mansur, 666 – Pq. São George – Cotia – SP, Cep: 06708-070
CNPJ: 72.843.212/0001-41 or 72.843.212/0006-56
Municipal Registration: 018712–7
State Registration: 278.130.837.119
Company Name: Cirion Technologies do Brasil Ltda.
Av. Pedro II, 329 – São Cristovão – Rio de Janeiro – RJ, Cep: 20941-070
CNPJ: 72.843.212/0002-22
Municipal Registration: 018712–7
State Registration: 278.130.837.119
Company Name: Cirion Technologies do Brasil Ltda.
Rua Semeador, 350 Cidade Industrial – Curitiba – PR, Cep: 81270-050
CNPJ: 72.843.212/0005-75
Municipal Registration: 386.361–9
State Registration: 90170568–21
TAX RETURN – No Tax Returns will be accepted from taxpayers who have failed to issue the Avulsa Tax Notes with the Tax Bureau. Non-taxpayers shall issue a declaration with the recipient’s address and Cirion’s address, detailing the quantity, description, and value. Said statement shall be signed by the company’s legal representative and allow Cirion to issue an entry invoice to regularize the equipment at our offices. The declaration shall state that the materials belong to the issuing company and are being transported for their own use outside their offices.
The Customer shall send the request attaching the aforementioned documents as described in the Contact Details section.
IMPORTANT:
Follow the basic concepts and premises to consider when installing equipment in racks located in Cirion’s equipment rooms as described below:
Compliance with the above items will ensure the proper operation and support of each of your equipment.
Failure to comply with any of the above items may impact the quality of the services without any detriment to Cirion and the client assumes all the risks that merit the omission of the requirements indicated in this item.
If advice for the installation of any equipment is considered necessary by the installer, this must be requested from the Data Center area.
The following rules apply to Technological Material entering the Data Center on a permanent basis.
The Authorized contact must inform their intention of removing Technological Material from their Housing space by filling out the appropriate equipment entry and exit form, informing the desired removal date, considering that Cirion’s analysis deadline is of 3 business days during business hours, and that the request may be rejected.
The request will be analyzed by Cirion’s technical teams and, once authorized, the removal of equipment may be conducted during all days and hours of the week. Scheduling will effectively occur only after approval. In case the analysis is denied, the request will be cancelled.
This authorization will be valid for one week for entry or entry scheduling. Failure to do so within the deadline, the ticket will be closed, and if the installation needs to be restarted, the customer shall file a new request.
The DOC registers the request through a ticket. To authorize this request, equipment’s power consumption must be verified in order not to exceed hired consumption rate, and documentation must follow the rules below. Once request is analyzed, the DOC must respond by email informing whether equipment removal has been approved or denied.
The Customer shall attach and submit the aforementioned information, as stated in the Contact Details section.
For Brazil:
IMPORTANT:
DECLARATION – Cirion does not issue an Equipment Exit Declaration for customers and does not accept the equipment removal without a Fiscal Exit Invoice.
The security guard will check and register the work items brought in by the Customer and check them when the Customer leaves the facilities.
Return Merchandise Authorization (RMA) is a transaction in which the owner of a product sends defective material to the supplier to obtain repair or replacement of the product.
For Brazil: For entry and exit related RMA, Cirion will receive the new equipment to normalize the customer’s environment, however, the damaged equipment will only be released for removal after the normalization of the process in question (Receipt of Customer’s invoice assigned to Cirion) so that an equipment exit invoice can be issued. This process will consider the time of receipt of the Invoice by the customer for relevant tax adjustments. During this period, defective equipment remains installed or inside Cirion premises.
If an internal movement of equipment already installed in their Data Center Housing space is required, the Authorized Contact must inform the DOC of his intention by sending the request with the equipment data and the date on which he wishes move it, and this request may be rejected.
The DOC open the request through a ticket. The request will be analyzed by Cirion’s technical teams, and the equipment’s power consumption to be moved will also be verified in order not to exceed the available rack consumption and, once the request is analyzed, the DOC must respond by e-mail informing whether equipment movement has been approved or denied.
If authorized, the equipment may be moved during all days and hours of the week. Scheduling will effectively take place after Cirion has approved the review. In case the analysis is denied, the request will be closed with its details.
The authorization is valid for one week for the movement or scheduling of the movement; in case this doesn’t occur within this deadline, the ticket will be closed and customer will need to open another request in case there is any type of movement still to be concluded.
IMPORTANT: Customer shall be responsible for managing (receipt, transport, moving, etc.) of equipment (complete or parts thereof), parcels, mail, etc., belonging to them.
After the contracting of the services by the Customer, the order reaches the Delivery team in charge of the implementation and transition of the service.
After the contracting of the services by the Customer, the order reaches the Delivery team in charge of the implementation and transition of the service.
The implementation is coordinated according to the complexity of the contracted services. Those of medium and high complexity comply with all phases of project management and those of low complexity meet only what is necessary to guarantee the delivery of the contracted service within the term.
The implementation of the services contracted by the Customer is done by adopting the project management methodology, based on PMBOK, which is adapted to an IT services environment and led by a Project Manager. These phases and the offered scope are briefly described below.
During this phase, the inputs of the analysis and survey of the requirements of the Customer are taken into account. The Time, Costs and Scope constraints will be evaluated to develop the corresponding Project Management Plan.
During this phase, the project management plan is developed, consisting of:
Risk analysis
Cirion will present the risk analysis in the migration of the data center and will establish control measures to deal with the identified risks.
The risk analysis will contain:
All risk analysis inherent to the project will be aligned, presented and documented during the meetings between Cirion and Customer.
In this phase, the execution of tasks is directed and managed according to the schedule built by the Project Manager, in order to implement the solution as it was framed in the project management plan.
Measurement and monitoring with the objective of guaranteeing compliance with the activities in accordance with the plans of the Project Management Plan, allowing the Project Manager to take corrective actions when necessary.
Once all the planned activities have been completed, the relevant tests and validations have been carried out, the project can be finalized, and the delivery is made to the operations team. At this moment, the Project Manager executes the transfer of knowledge of the environment to the team in charge of the management of the services. In this phase, the acceptance of the services by the Customer is also coordinated.
Cirion provides a Single Point of Contact in each country (see items 8.2 and 8.3) so that its customers can communicate via telephone, email or portal, according to the country where the customer has contracted services.
Currently, organizations depend greatly on their information solutions to meet their goals and business needs. This implies that IT services need to operate in line with the agreed levels of service.
The management team for the Information Technology Services carefully studies the appropriate assignment of the available resources so as to manage them integrally, minimizing drawbacks. The Data Center area provides contact points with 24 x 7 coverage to respond to your concerns and requests.
To support the management of services Cirion uses an IT Service Management System (ITSM) based on ITIL. The ticket is the record that Cirion and the Customer have as a joint means to recognizing the beginning, follow-up and end of the event.
This record has an alphanumeric non-sequential and auto-generated identification that shall be given to the Customer upon registering the occurrence. This number shall be used by the Customer as a unique reference for each subsequent contact related to the registered call or email request.
Incident Management is responsible for restoring the normal operation of the services as quickly as possible and minimizing the adverse impact to the critical operations of its Customers, thus ensuring that the best possible level of quality of service and availability is maintained.
The process of incident management is composed of the following subprocesses:
To adequately register, evaluate and track incidents, Cirion will request the following data from the Customer:
Incidents may be reported by the corresponding Authorized Contacts. Cirion will validate their identity.
Cirion’s representatives give the Customer a ticket number and initiate technical diagnostics tasks, thus ending the contact by phone if the incident was reported in this manner. If, as a result of the diagnosis, Cirion needs to communicate with the Customer to complete the activity, the person who requested the ticket shall be contacted.
Tickets in the services management system are entered both when the Customer communicates to report a failure, and when the situation is detected by Cirion.
Incidents will be given priority in accordance to their urgency and level of impact on Customer’s services.
An incident is defined as “Major” when it causes total, partial, or degrades a service provided by Cirion, that impacts one or more customer’s critical business operations. In this case, Cirion and the customer evaluate the impact of this incident and determine its criticality.
In case there is a proactive detection of failures, during the monitoring process of the service, Cirion personnel will open a ticket. If necessary, the Technical Responsible will be contacted for more information.
Start time for the failure registered in the ticket is the moment in which Cirion and customer establish that the service has stopped functioning according to the previously established conditions.
Cirion determines, in conjunction with customer, when the service conditions have returned to the ones previously agreed and this information will be registered in the ticket as solved, thus defining the incident’s resolution time.
The total duration of failure (TDF) is calculated as follows:
TDF = Time of resolution – Start time
The ticket will be considered closed only when there are no more pending issues between Cirion and the customer and when both parties agree on the resolution of the incident. In some cases, a solved ticket may remain open until its monitoring is finalized.
Once the incident has been solved, confirmation regarding the appropriate functioning of service is requested from customer and the ticket is closed. If confirmation is not received after 72 hours, the ticket will be automatically closed.
The Service Request Management is responsible for managing the life cycle of the Customer’s requests. They are standardized activities necessary for the administration of services. It is usually handled by the first level, because it is a request that does not cause impact or is low risk.
The following definition has been established for a low risk request / order that:
The process of Service Request Management is composed of the following subprocesses:
Problem Management seeks to identify the root cause of incidents, document and report known errors and initiate actions to improve or correct the situation. Problem management has reactive and proactive aspects.
The reactive aspect is related to the solution of problems in response to one or more incidents that have occurred, this means that an unplanned interruption of a service or a reduction in the quality of a service is categorized as an incident that may be the entry to a reactive problem record.
The proactive aspect is related to the identification and solution of known problems and errors before the incidents occur. This can be done through trend analysis based on compilations of event data, history of problems or incidents without relevance.
The problem management process consists of the following subprocesses:
Maintenance duties and other tasks are performed in accordance to a Change Enablement practice.
Customers will be informed about programmed events which, based on a risk evaluation, may imply on impacts to their services. In such cases, within reason, a window of time shall be agreed upon to perform the maintenance tasks.
Change Enablement controls the life cycle of all modifications, allowing the realization of beneficial alterations and with the minimum of interruption of the Customer’s services. Changes must be evaluated, prioritized, planned, authorized, implemented, tested and documented, guaranteeing a controlled environment and minimizing negative impacts in productive environments.
The Change Enablement process is composed of the following subprocesses:
CAB meetings
Cirion carry out CAB meetings every Tuesday and Thursday at 4:30 p.m. Brazil time.
After the change approval in the CAB, the specialist sends an e-mail to the Customer requesting its formal approval. This approval by the Customer must be made by e-mail up to one hour before the start of the change to enable the release in the service management tool.
Cirion manages infrastructure services (servers, software or service components), applying a change management process and using a tool to support it.
The types of changes applied can be:
Type
Features
Normal Change
Requires planning, impact and risk analysis, CAB and Customer approval.
Standard Change
Typified, modeled, low risk and pre-approved by CAB and requires Customer approval.
Emergency Change
Service interrupted or about to interrupt, change of normal type, but of immediate execution, late prepare documentation, could be done without previous tests, ECAB and Customer approves.
The objective is to establish the process to manage risk effectively and aligned with the strategic objectives of the business, to take advantage of potential opportunities and reduce exposure to adverse effects.
It is applied to the risks associated with the business objectives within the scope of the Integrated Management System (SIG). Project risk management is excluded since it is contemplated in its procedure and the risks that affect business continuity at the macro level that will be addressed in BCM management.
Scope plans:
Risk assessment involves:
Risk treatment involves:
Communication and consultation:
Record and report:
Monitoring and review:
Below is the escalation matrix for Data Center services to be used in the event of incidents.
Please note the following table with the recommended escalation rules based on the criticality of the incident and remember that the process starts with the registration of a ticket according to point 6.1 Incident Management of this document.
Cirion has a policy of not rejecting an escalation request in critical situations.
Escalation Level
Elapsed Time
Level 1
Level 2
Level 3
Level 4
May be contacted when minimum required SLA is exceeded or in extremely critical cases.
Exclusive information for Clients, available on the Cirion Client Portal.
According to the services hired, it is possible to access the corresponding reports online.
To access these reports, the Customer receives a username and password. The Customer should contact their Service Manager if there are issues accessing the Portal.
Online reports for Data Center services are found in the following site:
>On the menu select Tools >Reports > Data Center Reports
If you still do not have a username and/or password to access the portal, or are not familiar with its navigation, please contact your Service Manager or send an email to:
Country
DATA CENTERS
ARGENTINA
Buenos Aires (BUE1)
ARTIGAS
Av. del Campo 1301, CP C1427APA
Córdoba (COR1)
Av. Velez Sarfield 4445, CP X5016GCF
Mendoza (MEN1)
Carril Rodriguez Peña 2331, CP M5501ETK
Rosario (ROS1)
Av. Circunvalación 25 de Mayo 1545 Bis, CP S2000
BRASIL
Rio de Janeiro (RIO1)
Av. Pedro II, 329, Quinta da boa Visita, CEP 20941-070
São Paulo (SAO1)
Av. Eid Mansur, 666, Parque Sao George, Rodovia Raposo Tavares, KM 25, CEP 06708-070
Curitiba (CUR1)
Rua do Semeador, 350 – CEP 81270-050
CHILE
Santiago (SAN1)
Sta. Marta de Huechuraba, 6951, Huechuraba
COLOMBIA
Bogotá (BOG1)
SUBA
Calle 127 – 87-51, Bogotá
Bogota (BOG2)
COL XV
Carrera 68 169A-73, Bogotá
Cali (CAL1)
CALI
Avenida 6B # 25AN-19, Cali
ECUADOR
Quito (QUI2)
Data Center Quito
Calle Alonso López s/n y Calle Juan Barrezueta, Quito
Quito (QUI1)
Telepuerto Quito
Calle Juan Diaz, 37-111, – Urbanización Iñaquito Alto, Quito
Guayaquil (GUA1)
Parque Tecnológico ESPOL
La Prosperina. Guayaquil
MEXICO
Ciudad de México (MEX1)
Calle Lago Zurich 96A, Granada, CDMX
PERÚ
Lima (LIM1)
Av. Manuel Olguín #395, Surco, Lima CP Lima33
VENEZUELA
Caracas (CAR1)
Calle 7 – La Urbina – Caracas 1070
URL
Description
Country
Applies to the creation of requests and / or communication of incidents for all hired services, generation of reports when appropriate and other functionalities for the management of services.
Applies for all countries
Country
Portal/E-Mail
COLOMBIA
VENEZUELA
Región
CARIBE & LATAM
The current certifications of ISO 9001, 14001, BS OHSAS 18001, 20000-1 and 27001 are available on the following page www.certipedia.com.
Click on the Certified Management Systems and Services of Companies option, complete with “Cirion” to perform the search.
Our Data Centers are PCI-DSS compliant and AICPA SOC 1, SOC 2 and SOC 3 standards.
Cirion is focused on offering a robust and resilient infrastructure certified by the Uptime Institute, which are available on the following page: https://uptimeinstitute.com/tier-certification/tier-certification-list
Cirion is committed to a sustainable business model, aligned with corporate values and business integrity standards. In our Sustainability Report, you will find all the information about our sustainable practices and our progress on environmental, social and governance (ESG), which can be found on Cirion’s website.
Equipment Room: safe area with a controlled environment to host IT and communications equipment which are part of the service.
DOC: Data Center Operations Center.
