PhoneFactor Achieves SAS 70 Certification

Certification Underscores the Security and Reliability of its Two-Factor Authentication Platform

May 7, 2009 – PhoneFactor, a leading provider of security products and services, today announced that is has achieved SAS 70 certification, demonstrating the company’s adherence to the rigorous requirements set forth by the Statement on Auditing Standards No. 70.

The SAS 70 examination was conducted by a nationally recognized independent auditing firm and included a comprehensive review of PhoneFactor’s infrastructure, corporate governance, information security management, and physical and environmental security management policies and practices. PhoneFactor was found to have met all of the requirement s to ensure delivery of highly secure, reliable, and scalable services to its clients.

“The SAS 70 certification demonstrates to our clients that we have the operational and security processes in place to support their critical business systems,” said Tim Sutton, PhoneFactor CEO. “We have made significant investments in building an operational environment that meets the highest industry standards.”

SAS 70 is an auditing standard issued by the American Standards Board and the American Institute of Certified Public Accountants (AICPA). SAS 70 defines the professional standards used by independent auditors for assessing the operational effectiveness of a service organization. For organizations that are operating in regulatory compliant environments, selecting service providers who have proven compliance with SAS 70 standards is essential.