Home / Compliance

Compliance

Standards, audits and controls behind every Tier 3 deployment.

Overview

Certifications are held by Pacific West Compute or the facility operator, as named in each customer agreement. Scope varies by site.

Facility design standards

StandardScope
Uptime Institute Tier IIIConcurrently maintainable, N+1, 99.982% design availability
Telecommunications Industry Association (TIA) 942-B, Rated-3Data center infrastructure
American National Standards Institute (ANSI) / Building Industry Consulting Service International (BICSI) 002Design best practices, Class F3
American Society of Heating, Refrigerating and Air-Conditioning Engineers (ASHRAE) TC 9.9Temperature and humidity ranges
National Fire Protection Association (NFPA) 70, National Electrical Code (NEC)Electrical installation
NFPA 72Fire alarm and signaling
NFPA 75 and 76Fire protection for information technology (IT) and telecommunications
NFPA 110Emergency and standby power
International Building Code (IBC) and American Society of Civil Engineers (ASCE) 7Structural and seismic design

Audit attestations

AttestationScope
System and Organization Controls (SOC) 1 Type II, Statement on Standards for Attestation Engagements (SSAE) 18Financial reporting controls
SOC 2 Type IISecurity, availability, confidentiality
International Organization for Standardization (ISO) / International Electrotechnical Commission (IEC) 27001:2022Information security management
ISO 22301Business continuity
ISO 9001Quality management
ISO 14001 and ISO 50001Environmental and energy management

Regulatory frameworks supported

FrameworkSupport
Health Insurance Portability and Accountability Act (HIPAA) and Health Information Technology for Economic and Clinical Health (HITECH) ActPhysical safeguards
Payment Card Industry Data Security Standard (PCI DSS) v4.0Physical access, Requirement 9
National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 Rev. 5Physical and Environmental Protection (PE) controls
NIST Cybersecurity Framework (CSF) 2.0Risk management
Criminal Justice Information Services (CJIS) Security PolicyPhysical protection
General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA)Data processing terms
Export Administration Regulations (EAR)Customer and end-use screening
Office of Foreign Assets Control (OFAC)Sanctions screening

Physical security

  • On-site security 24/7/365
  • Perimeter fencing and vehicle barriers
  • Badge and biometric multi-factor authentication (MFA)
  • Mantraps and anti-tailgating
  • Closed-circuit television (CCTV) on entrances, perimeter and aisles
  • Visitor ID checks, escorts and logs
  • Locking cabinets, private cages available
  • Quarterly access reviews

Power, cooling and environment

Rows of standby generators and cooling units at a data center campus
  • N+1 uninterruptible power supply (UPS)
  • Standby generators, on-site fuel, priority refueling
  • A and B feeds per rack, 2N available
  • N+1 cooling
  • Direct-to-chip liquid cooling available
  • 24/7 temperature, humidity and power monitoring
  • Very Early Smoke Detection Apparatus (VESDA)
  • Pre-action or clean-agent fire suppression
  • Leak detection

Operations

  • Cold spares on site
  • Change management with advance notice
  • Maintenance without interrupting load
  • Incident response and customer notification
  • Background-checked staff, annual security training
  • Hardware chain of custody
  • Media sanitization per NIST SP 800-88, with certificates of destruction
  • Annual business continuity and disaster recovery (DR) tests
  • Critical vendor reviews

Service Level Agreements (SLAs)

Defined in each Master Services Agreement (MSA). Up to Tier 3 quality for dedicated and bespoke deployments. Cross-site redundancy for distributed inference.

  • Power availability
  • Environmental ranges
  • Network availability, where provided
  • Remote hands response
  • Hardware replacement from cold spares
  • Incident notification
  • Service credits

Available documentation

  • SOC 1 and SOC 2 Type II reports
  • ISO certificates
  • Uptime Institute Tier certificates
  • Certificates of insurance
  • Standardized Information Gathering (SIG) questionnaire
  • Consensus Assessments Initiative Questionnaire (CAIQ)
  • Business continuity summary
  • Facility specifications

sales@pacificwestcompute.com · 215-279-0317