
The Statement on Auditing Standards (SAS) No. 70 is a widely recognized audited standard developed by the American Institute of Certified Public Accounts (AICPA) for the assessment of Service Organizations. The audit is performed by professionals who have experience in accounting, auditing and information security.
The certification process requires an in-depth audit of data hosting control objectives, activities and related processes over a time period of typically 6-12 months. A Type II Audit and Certification verifies that data hosting control objectives and activities are in place, suitably designed, enforced and operating effectively. Routine testing and monitoring of the network ensures that critical systems (firewalls, routers and servers) are configured, maintained and operating according to the company‘s security policy to ensure a constant safeguard against being compromised or breached.
SAS 70 Type II Compliance — Meets Sarbanes-Oxley Act requirements. Demonstrates effectiveness of internal information technology controls and data security safeguards. Certifies that critical systems, (e.g., firewalls, routers, servers) are configured, maintained and operating effectively, and that network security testing and monitoring are integrated into the security program.
![]() |
DriveSavers has undergone an extensive audit by control-oriented professionals who have experience in accounting, auditing and information security related processes. We are the only data recovery company in the world that has been awarded SAS 70 Type II Certification. View Certificate |







