Kiteworks
By Kiteworks
Needs Assessment and Planning: The initial phase involves working with Kiteworks consultants to assess the organization's specific needs, compliance requirements, and security policies. This helps define the scope of the project, including user roles and data migration plans.
Configuration and Setup: The software is installed and configured based on the organization's requirements. This includes setting up user permissions, security protocols, and integrating the platform with existing systems such as email clients and enterprise applications.
Data Migration: Existing data is securely transferred to the Kiteworks platform. This step ensures that sensitive information remains protected during the migration process.
Customization and Integration: The software is customized to align with the organization's branding, workflows, and industry-specific requirements. Integration with third-party apps like Microsoft 365 or Salesforce is completed.
Testing and Validation: The system undergoes rigorous testing to ensure everything works as expected, including security settings, file-sharing capabilities, and user roles. Any bugs or configuration issues are addressed.
User Training: Administrators and users are trained on how to use the platform effectively, including secure file sharing, monitoring, and compliance management features.
Custom Applications: Kiteworks allows the creation of custom applications to extend its functionality and integrate with existing business processes.
Customizable Settings: Custom applications can have various settings configured, including name, description, and icon.
Scopes: Developers can define specific scopes for custom applications, controlling access to different parts of the Kiteworks API.
Security Features: Custom applications can be configured with security features such as OAuth 2.0 authentication.
Training Services:
Onsite Training: Kiteworks offers onsite training sessions where their experts visit the client's location to provide hands-on training.
Remote Training: For convenience, remote training sessions are also available, allowing users to learn from anywhere.
Custom Training Programs: Tailored training programs can be developed to meet the specific needs of an organization.
Hourly Training Rates: Training services are charged at $200 per hour, providing flexibility in how much training an organization requires.
Support Services:
Standard Support: Includes access to technical support during business hours, software updates, and access to the Kiteworks knowledge base.
Premium Support: Offers 24/7 technical support, faster response times, and a dedicated Technical Account Manager for more personalized service.
Unified Security Architecture: End-to-End Encryption: Data is encrypted both in transit and at rest using strong encryption protocols to prevent unauthorized access.
Secure File Transfer: The platform supports secure file transfer protocols to ensure the safe exchange of sensitive information.
Granular Access Controls: Administrators can define detailed access controls to restrict who can access, edit, or share data.
Audit Logs: Detailed audit logs are maintained to track all user activity, providing transparency and accountability.
Compliance and Certifications: Regulatory Compliance: Kiteworks complies with various regulatory standards such as GDPR, HIPAA, and FedRAMP, ensuring that data handling practices meet stringent legal requirements.
Certifications: The platform holds several security certifications, including ISO 27001, which demonstrates a commitment to maintaining high security standards.
Advanced Security Features:
Multi-Factor Authentication (MFA): MFA is available to add an extra layer of security to user accounts.
Data Loss Prevention (DLP): DLP policies can be enforced to prevent the unauthorized sharing or leakage of sensitive information.
Update Frequency and Management:
Kiteworks regularly releases updates and security patches, though the exact frequency is not specified in the provided information.
For Premium Support customers, Kiteworks support engineers apply all software updates and security patches according to an agreed-upon schedule.
The company provides a Customer Support Portal where users can access documentation, knowledge base, and submit product improvement ideas.
Kiteworks offers an Annual Health Check and Deployment Review for Premium Support customers, which includes checking for issues with storage capacity, file consistency, and other system aspects.
Kiteworks supports data portability requirements, enabling secure access, transfer, and download of personal information.
The platform complies with various data privacy laws such as GDPR, Australia's CDR, Canada's PIPEDA, and California's CCPA, which include data portability requirements.
Kiteworks allows organizations to quickly discover personal information from a single pane of glass, with visibility into all connected on-premises and cloud content sources.
The platform enables the establishment of opt-in mechanisms and procedures for data collection, detailed consent forms, and minor consent procedures.
Kiteworks provides features to ensure data remains protected during the portability process through secure file sharing, encryption, and access control features.
Users have the right to receive their personal data in a usable format and transmit it to a third party, which is known as the right of data portability.
Kiteworks states that they do not sell or share collected information with third parties, except for limited reputable partners involved in direct selling of their solutions and vendors who provide information management solutions.
The company emphasizes that they are a Controller of limited, non-sensitive personal information for legitimate purposes of direct marketing, selling, delivering, and supporting the Kiteworks Website.
Automatic Renewal:
Maintenance Support Services automatically renew at the end of each term.
Kiteworks will invoice the customer for the specified maintenance fees upon renewal.
Cancellation of Maintenance Support: Customers can terminate Maintenance Support Services upon the expiration of any one-year maintenance term.
Written notice must be provided to cancel the service, though the specific notice period is not mentioned in the available information.
Lapsed Maintenance Support: If Maintenance Support lapses, customers can renew support for the affected Accellion Software and/or Accellion Appliance.
Renewal after a lapse requires paying the then-current fees, which may be higher than continuous maintenance fees.
Contract Term:
The agreement commences on the Effective Date set forth in the Order Form.
The initial term continues for the License Term specified in the Order Form.
Contract Renewal:
Parties can agree in writing to renew the agreement for additional License Terms.
Renewal requires the execution of a new Order Form.
Termination Conditions:
Either party can terminate the agreement if:
The other party breaches any material provision of the agreement and fails to cure within 30 days of written notice.
The other party becomes subject to bankruptcy proceedings not dismissed within 60 days.
Consequences of Termination:
Upon termination or expiration, all rights granted under the agreement terminate.
Customers must promptly return or destroy the Accellion Software, Confidential Information, and Accellion Appliance.
Post-Termination Obligations:
Termination does not relieve the customer of the obligation to pay all charges accrued up to the termination date.
Survival Clauses:
Certain provisions of the agreement survive expiration or termination, though specific details are not provided in the available information.
Hardware Warranty:
SOC 2 Type II Certification: Kiteworks has achieved SOC 2 Type II certification for six consecutive years, demonstrating its commitment to data security and privacy.
ISO Certifications:
ISO 27001 (Information Security Management)
ISO 27017 (Cloud Security)
ISO 27018 (Protection of Personally Identifiable Information in the cloud)
These certifications ensure Kiteworks meets high standards for protecting confidential data, including PII in cloud computing environments.
FedRAMP Authorization: Kiteworks has obtained FedRAMP Authorization for Moderate Impact Level information, which is crucial for working with U.S. government agencies.
HIPAA Compliance: Kiteworks enables healthcare organizations to ensure HIPAA compliance when sharing patient information internally and externally.
FIPS 140-2 Compliance: The platform is FIPS 140-2 validated, allowing businesses to comply with this federal standard for cryptographic modules.
ITAR Compliance: Kiteworks meets security requirements listed in NIST 800-171 and FedRAMP for controlled unclassified information (CUI) protection.
Cyber Essentials and Cyber Essentials Plus: Kiteworks has achieved these UK government-backed certifications, demonstrating a high standard of IT security.
IRAP Assessment: Kiteworks has been evaluated by the Information Security Registered Assessors Program (IRAP) for up to the Protected data classification level in Australia.
GDPR Compliance: The platform supports data portability requirements and other aspects of GDPR compliance.
