Comarch Security

Control, store and process your business data with world-class Comarch security

The latest technological standards, IT innovations, advanced architecture (Tier III and Tier IV) and several business models (SaaS, PaaS, IaaS) are the characteristics of Comarch Data Centers, which are massive file repositories, trusted by hundreds of international organizations. With our services your data will always be up to date, safe from disruption, failure-free and stored in a backup center so you can be up and running in no time in the event of accidents.

Security Measures On Every Level

Comarch’s primary objective is to provide clients with services at the highest possible level of security. We realize that your data are critical to the success of your business, so every piece of data processed at a Comarch Data Center is protected in accordance with international certificates, leading industry standards, critical privacy policies, global and local laws and physical measures.

Physical Security

  1. 01 Building construction
  2. Comarch Data Centers are designed and built exclusively to house IT infrastructure. All internal and external features are constructed with high-quality materials. Building and design characteristics have been optimized to minimize the risks associated with natural hazards (e.g. flooding, storms or fire) or terrorist attacks. All water pipes are protected with a drip-tray and equipped with a leak detection system which is linked to the building management system (BMS).
  3. 02 Security measures
  4. The multi-level infrastructure of our DC facilities’ physical protection involves gas fire-extinguishing, CCTV, security alarms and access control systems. It is based on personal identification proximity cards and security locks. There are dedicated security zones (e.g. fencing, separated racks and cabinets) in each data center. Every room is equipped with security alarm systems that include intrusion and motion detectors.
  5. 03 Limited access
  6. Access to Comarch Data Center facilities is secured through a badge key system and is restricted to authorized employees. Access for third parties and visitors may be granted only through a formally documented process. Badge access within each Comarch Data Center is limited only to specific areas which are required by the employee’s job functions. The entrance door and server rooms are monitored continuously with CCTV and movement sensors.
  7. 04 24/7/365 monitoring
  8. On-site security personnel monitor Comarch Data Center facilities 24/7/365 using indoor and outdoor video surveillance. Video recordings are stored for further forensic examination.
  9. 05 Power supply
  10. Each Comarch Data Center is supplied with energy via two redundant external lines. Backup power supply is provided by UPS (uninterruptible power supply) systems and diesel generators. The UPS systems and diesel generators are designed to be fully redundant.
  11. 06 Air conditioning
  12. Comarch Data Centers are equipped with reliable HVAC systems to guarantee desired operational conditions for IT infrastructure.
  13. 07 Fire protection
  14. Comarch Data Centers are equipped with multi-zoned fire suppression systems based on neutral gas. They activate only when a sprinkler head reaches a predefined temperature, or if two or more devices trigger alarms in any zone.
  15. 08 Environmental monitoring
  16. For systems hosted at Comarch Data Center, we have implemented a comprehensive monitoring processes supported by a dedicated solution - Comarch Monitoring System. The main purpose of Comarch Data Center monitoring is to trigger alerts about incidents that have or may have occurred on hosted systems. Additional monitoring features include reporting against SLA requirements, trend analysis included in capacity management, and intelligent monitoring (the monitoring system automatically performs limited service actions).

Building construction

Comarch Data Centers are designed and built exclusively to house IT infrastructure. All internal and external features are constructed with high-quality materials. Building and design characteristics have been optimized to minimize the risks associated with natural hazards (e.g. flooding, storms or fire) or terrorist attacks. All water pipes are protected with a drip-tray and equipped with a leak detection system which is linked to the building management system (BMS).

Security measures

The multi-level infrastructure of our DC facilities’ physical protection involves gas fire-extinguishing, CCTV, security alarms and access control systems. It is based on personal identification proximity cards and security locks. There are dedicated security zones (e.g. fencing, separated racks and cabinets) in each data center. Every room is equipped with security alarm systems that include intrusion and motion detectors.

Limited access

Access to Comarch Data Center facilities is secured through a badge key system and is restricted to authorized employees. Access for third parties and visitors may be granted only through a formally documented process. Badge access within each Comarch Data Center is limited only to specific areas which are required by the employee’s job functions. The entrance door and server rooms are monitored continuously with CCTV and movement sensors.

24/7/365 monitoring

On-site security personnel monitor Comarch Data Center facilities 24/7/365 using indoor and outdoor video surveillance. Video recordings are stored for further forensic examination.

Power supply

Each Comarch Data Center is supplied with energy via two redundant external lines. Backup power supply is provided by UPS (uninterruptible power supply) systems and diesel generators. The UPS systems and diesel generators are designed to be fully redundant.

Air conditioning

Comarch Data Centers are equipped with reliable HVAC systems to guarantee desired operational conditions for IT infrastructure.

Fire protection

Comarch Data Centers are equipped with multi-zoned fire suppression systems based on neutral gas. They activate only when a sprinkler head reaches a predefined temperature, or if two or more devices trigger alarms in any zone.

Environmental monitoring

For systems hosted at Comarch Data Center, we have implemented a comprehensive monitoring processes supported by a dedicated solution - Comarch Monitoring System. The main purpose of Comarch Data Center monitoring is to trigger alerts about incidents that have or may have occurred on hosted systems. Additional monitoring features include reporting against SLA requirements, trend analysis included in capacity management, and intelligent monitoring (the monitoring system automatically performs limited service actions).

Certified Compliance

Comarch Data Centers are audited regularly by our engineers and independent specialists for security, privacy, legal compliance (GDPR included) and necessary certificates. We follow the standards below:

PN-N-18001:2004

PN-N-18001:2004 Occupational Health and Safety Management System

PN-EN ISO 9001:2009

PN-EN ISO 9001:2009 Integrated Quality Management System

PN-EN ISO 14001:2005

PN-EN ISO 14001:2005 Environmental Management System

PN-ISO/IEC 27001:2014-2

PN-ISO/IEC 27001:2014-2 Information Security Management Systems

PN-EN ISO 9001:2009

PN-EN ISO 9001:2009 Quality Management Systems

Internal Control System

Internal Control System (WSK) in conformance with Criteria of WSK

GDPR

General Data Protection Regulation

PCI DSS

PCI DSS Payment Card Industry Data Security Standard (selected projects)

ISAE3402 (SAS-70)

ISAE3402 (SAS-70) International Standard on Assurance Engagements (selected projects)

Comarch Data Center Parameters

Parameter

Comarch Data Center Lille

Comarch Data Center Krakow SSE6

Comarch Data Center Krakow SSE2

Comarch Data Center Dresden

Data center tier

Tier 3+

Tier 3+

Tier 3

Tier 3+

Server room space

600 m2

3x 200 m2

600 m2

300 m2

Number of rack cabinets

300

110

120

60

Raised floor load capacity

15 kN / m2

15 kN / m2

15 kN / m2

15 kN / m2

Maximum load of a single rack cabinet

10 kW

10 kW

8 kW

10 kW

Current server room load

50 kW

50 kW

500 kW

300 kW

Power generators

2x 1600 kVA

3x 1200 kVA

2x 650 kVA,

1x 930 kVA

2x 650 kVA

Independent connections to power grid

2

2

2

2

Fire protection system

Inergen IG55

FM200

Inergen

FM200

Number of UPS

6x 300 kVA

2x 1000 kVA

3x 300 kVA

2x 300 kVA

UPS capacity

15 min

15 min

20 min

15 min

UPS redundancy

2N

N+1

N+1

N+1

The air temperature at the inlet to the rack

Up to 26 degree Celsius, separated cold and hot zones

Up to 26 degrees Celsius, separated cold and hot zones

Up to 26 degrees Celsius, separated cold and hot zones

Up to 26 degrees Celsius, separated cold and hot zones

Humidity in the server room

40-60% - in accordance with ASHRAE

40-60%

40-60%

40-60%

Physical security

Round the clock

Round the clock

Round the clock

Round the clock

Access control

Proximity cards

Proximity cards

Proximity cards

Proximity cards

Comarch Security And Business Continuity Concept

  • Network and security device redundancy
  • Hardware and third-party software patch management
  • Disaster recovery
Comarch guarantees full redundancy of all network and computing devices. In the event of device failure, another device will support all elements of the system with the same performance. No human interaction is needed, since configuration assumes automatic clusters.
Each Comarch Data Center benefits from the deployment of a sophisticated tool called Patch Notifier, which gathers information about patches and updates released by vendors and used to support security management. The whole process runs in accordance with the change management procedure, during which appropriate change introduction/rollback/backup plans are created, necessary authorization is obtained, and all communication is documented in the ticketing system.
The disaster recovery environment provides the same availability, functionality and performance as the production environment. The Business Continuity Plan is executed at least once a year. The test scenario assumes only functional tests, excluding production switching.

Comarch Data Center Locations

Comarch stores information in 15 data centers, strategically located on three continents in key business areas, and is constantly expanding and upgrading the infrastructure.

To learn more about our Data Centers and their locations, visit the dedicated website.

Go To Locations

Data Center Locations

Our Clients

  • Circle K

    Circle K

    Comarch Network Managed Services: creating a flexible and highly secure network to increase reliability
  • Heathrow Airport

    Heathrow Airport

    To support its growing business, Heathrow Airport chose Comarch Loyalty Management application in hosting model
  • Boots

    Boots

    See how Comarch Data Center services influence growth and customer satisfaction at Boots E-Wallet
  • Nicols

    Nicols

    Eliminating outage incidents and decreasing network vulnerabilities with Comarch Data Center services
  • Jetblue Airways

    Jetblue Airways

    Reducing application response time and increasing data processing speed by deploying Comarch Data Center services
  •  Valeo

    Valeo

    Comarch IT Outsourcing Services for Valeo Germany
  • Drosed

    Drosed

    Improving levels of collaboration and customer care by cooperation with Comarch
  • European Southern Observatory

    European Southern Observatory

    Better process optimization and increased IT security with complex portfolio of Comarch IT Services
    More success stories

    White Paper: Ensure the Correct Functioning of Your Application with Managed Multi-cloud Services

    White Paper: Data Center Outlook

    Video: Comarch Data Center

    Development of Comarch Data Center services

    Tell us your business needs, and we’ll find the perfect solution