Security and Compliance

Security And Compliance

Your agency takes its responsibility for privacy and security very seriously. Our cloud based solutions are hosted in a FedRAMP certified platform to meet your security, reliability, and compliance requirements. Our staff pass criminal background checks as well as annual security training for HIPAA and HITECH. Our programmers conduct penetration testing using tools like Netsparker and following OWASP best practices for secure coding. Our solutions also meet Americans with Disabilities Act Section 508 compliance requirements. See SLA in the previous section for response timelines. In February of 2025 JUMP received a Star Level One from the Cloud Security Alliance (CSA)

Commitments To Ensure Optimal Security

Our Dedicated Cloud

Our SaaS solutions are hosted with Rackspace Government Solutions. JUMP has been working with Rackspace since 2008 for managed services with co-located servers and managed security services. In 2020, JUMP migrated to the RGS environment to achieve a FedRAMP compliant hosting platform.

Our data centers are strategically placed in FedRAMP-authorized locations and our RGS private cloud architecture allows government entities to meet all NIST 800-53, FISMA, FedRAMP and organization-specific security requirements.

RGS is a Joint Operational Board (JAB)-authorized cloud vendor that empowers JUMP to ensure the security of data for the public and private sectors from the virtualization layer down to the physical infrastructure. Leveraging RGS, JUMP offers 24/7/365 visibility and reliable uptime performance to support government agencies and enterprises of any size. RGS is also fully IL6-DISAS and HIPAA compliant. Together with Rackspace Government Solutions (RGS), JUMP provides customers with fully compliant FedRAMP cloud infrastructure to support your critical applications. Rackspace has 21 years of experience meeting and exceeding government and commercial security requirements. Data centers are strategically placed in FedRAMP-authorized locations and our RGS private cloud architecture allows government entities to meet all NIST 800-53, FISMA, FedRAMP and organization-specific security requirements.

To learn more about our security compliance, provisioned architecture, vulnerability scans and patch management, please contact us.

Application Security

JUMP utilizes tools such as Invicti to mitigate vulnerabilities and ensure security at the application level. Our development team is led by senior software engineers with more than 30 years of experience. In addition, our engineers receive annual training in current code level vulnerabilities. Following best practices in software engineering, the team then submits their product for a Invicti review before releasing the software to customers.

I.T. Requirements Met

Information Technology Departments enjoy working with JUMP. We understand their concerns and requirements, so we do our best to make it easy for their reviews. Our SaaS solutions leverage modern browsers with no additional plugins required. We offer SSO integration and provide a testing sandbox prior to new releases. Our database backups are published via secure connection, and we assist your team in the integration with Power BI or other external dashboard solutions.

At JUMP Technology Servies, our software is designed to be used easily by application “super users” which means that I.T. staff are not needed to support the functions of your software system.

If you need assistance finding your Information Technology liaison, please contact us. Some information cannot be shared via the internet.