Vocado Technology Essentials
Financial aid process and compliance demands have never been more stringent, and they're changing all the time. Your school needs a robust, dynamic, future-proof solution.
Vocado technology is built to meet the financial aid management requirements for the schools of today and tomorrow.
Vocado client deployments are built on the Amazon Web Services (AWS) platform—one of the most trusted cloud platforms in the world.
We manage your application infrastructure — the interface is as simple as a Web browser. Our "shared-nothing", multi-tenancy cloud devotes a full server stack to each client — your data is separate from everyone else's. Customers seeking even more control and options than the Secure Socket Layer-connected Vocado Cloud can opt for the Vocado Private Cloud, with dedicated connectivity through a corporate virtual private network (VPN) gateway.
Data security is essential in any customer-facing application. When that data relates to financial status and student information, security is that much more critical. The Vocado approach to information security is multi-layered, ensuring data is protected throughout the system.
All Vocado application user interfaces and API communication takes place through an SSL- or VPN-secured connection. Communication with Department of Education systems is handled through secure file transfer protocol (SFTP). Perhaps most importantly, whether the data is in-flight between servers or at rest in the database, your data is always encrypted.
Communication in-flight between servers is encrypted using strong industry standard SSL. Data at-rest in the database is encrypted by Amazon's Elastic Block Storage (EBS) Volume Encryption using AES-256 level encryption.
Disaster Recovery and High Availability
For the highest level of Disaster Recovery, the primary run-time system is replicated in another data center in another geographic region. Should a major blackout or weather event compromise the availability of your data, the backup data center can be brought online quickly.
At the highest level, your SLA promises your system has a recovery point objective of one hour, and a recovery time objective of 24 hours—you won't have to resynchronize more than an hour of transactions, and you’ll be up and running within a day.
To address high availability, the primary run-time system is distributed across multiple Amazon Availability Zones to ensure there are no service interruptions. An elastic load balancer routes traffic to high-availability service zones and keeps latency within zones low.
But disaster recovery and high availability aren't just about technology. Vocado leverages people, processes, and technology, with fully documented client communication protocols and IT processes.
Regulatory compliance is Job One; not only with financial aid regulations, but also with financial regimens including Sarbanes-Oxley, Gramm-Leach-Bliley, and ISO 27000.
Vocado Control Matrix allows visibility into the process for independent auditors. In fact, Vocado recently completed an extensive SOC 1 Type 1 Audit performed by the independent auditing firm Auditwerx. The SOC 1 report audit attests that Vocado control objectives are appropriately designed and that controls safeguarding customer data are operating effectively.
Finally, a policy enforcement layer drives product and process compliance.