1
2 DataLocker’s motto is “Simply Secure”MISSION STATEMENT DataLocker’s motto is “Simply Secure” To provide easy to use, cost effective, military grade data encryption solutions to enterprises around the world.
3 Company at a Glance ABOUT DATALOCKER OUR COMPANY OUR CUSTOMERSFounded in 2007 HQ in Overland Park, KS with offices in San Jose, CA; Ottawa, Canada; London, United Kingdom; and Seoul, S. Korea Acquired BlockMaster in June 2015 Acquired IronKey, Enterprise Management Service & Hard Drives in February 2016 Kansas City Chamber of Commerce Top Ten Small Business 3 of last 5 years. OUR CUSTOMERS 70% of the Fortune 100 use DataLocker solutions Over 250,000 users worldwide Products are sold in over 35 countries Key Verticals: Government, Banking and Financial Services Sales Model : Channel Focused OUR PRODUCTS DataLocker products are developed and engineered in house All products are TAA Compliant, meeting federal and military requirements Patented technology – Strong patent portfolio
4 RISKS AND PROBLEMS
5 Encrypted Optical MediaDATALOCKER PRODUCT PORTFOLIO DataLocker Supports & Manages All Your Secure Endpoints Encrypted Hard Drives Encrypted Flash Drives Encrypted Optical Media Cloud Encryption Gateway Central Management Platform
6 ONE COMPANY, 3 BRANDS, STRONG PRODUCT LINEDL2 Hard Drives DL3/DL3FE Hard Drives H Series Hard Drives Sentry USB EncryptDisc SafeCrypt EMS Cloud EMS On-Prem SafeConsole Cloud SafeConsole On-Prem
7 PROTECT PORTABLE DATA EASY TO USE GUARANTEE COMPLIANCE AFFORDABLEDATALOCKER SOLUTIONS PROVIDE PROTECT PORTABLE DATA EASY TO USE Automatic hardware encryption without any hassles or installations Manage devices in the field: updates, remotely disable Works with hardware encrypted devices including flash drives, and high capacity external hard drives. GUARANTEE COMPLIANCE AFFORDABLE Not opt-in and can not be disabled Verify policy controls Scalable management (SaaS or OnPrem) Total cost of ownership is less than a non-encrypted non-managed solution.
8 DL2 DL3 DL3 FE DataLocker DL SeriesENCRYPTED PORTABLE HARD DRIVES DataLocker DL Series DL2 Hardware encrypted external USB 2.0 hard drive with FIPS validation for the entire device Up to 2TB capacity No software or drivers required TAA Compliant Currently deployed throughout the US military DL3 Hardware encrypted USB 3.0 external hard drive Up to 2TB in capacity. Requires no software or drivers Centrally Manageable Optional two factor authentication – requires two modes of authentication (password plus a physical RFID tag) DL3 FE Dual Crypto, FIPS validated, hardware encrypted, USB 3.0 external hard drive Same exact features as the DL3 Also deployed through the US military The DL2 is a FIPS validated encrypted external hard drive. Features : Up to 2TB in capacity. A USB 2.0 interface Requires no software or drivers. Currently deployed throughout the US military. The DL3 is a hardware encrypted USB 3.0 external hard drive. Centrally Manageable Optional 2 factor authentication – gives you an added layer of protection by requiring 2 modes of authentication (your personal passcode plus a physical RFID tag The DL3FE is a Dual Crypto, FIPS validated, hardware encrypted, USB 3.0 external hard drive. New advanced security features including the Auto-Lock Feature which automatically times out the device when idle and the Read-Only Feature which restricts users from overwriting or altering contents of the drive. Optional 2 factor authentication Also deployed through the US military DL3 & DL3FE advanced security features include: Alpha/numeric strong password support with back lit patented touch pad Rotating keypad to prevent surface analysis attacks Self destruct mode – complete data destruction after 9 unsuccessful attempts Read only mode and Auto Lock features 8
9 DL3FE – Dual Crypto Cryptography OverviewPORTABLE HARD DRIVES DL3FE – Dual Crypto Cryptography Overview Only commercially available encrypted storage device to utilize two-pass encryption How two-pass encryption works: Data is encrypted with a single round of 256 bit AES XTS mode encryption Data is directly passed to a second crypto engine undergoing a second round of 256 bit AES CBC mode encryption Key Generation – Two independent data encryption keys (DEK) are randomly generated using independently generated IV’s Keys are never stored or transmitted in plain text
10 H200 BIO H300 H350 DataLocker H series (Formerly IronKey)ENCRYPTED PORTABLE HARD DRIVES DataLocker H series (Formerly IronKey) H200 BIO FIPS Level 3 validated, hardware encrypted, USB 2.0 external hard drive. Up to 1TB in capacity. Centrally manageable with ACCESS Enterprise Fingerprint two factor authentication - Further enhance security and convenience with the biometric capabilities through an ergonomic swipe sensor H300 USB 3.0 encrypted external hard drive. Two versions: Basic and Enterprise (Enterprise version requires IronKey EMS) Up to 2TB in capacity. Centrally manageable with IronKey Enterprise Management Service or Server H350 FIPS Level 3 validated, USB 3.0 encrypted external hard drive. FIPS Level 3 validation The H200 is a FIPS Level 3 validated, hardware encrypted, USB 2.0 external hard drive. Level 3 – This level exceeds Level 1 and Level 2 requirements, and adds physical tamper-resistance and identity-based authentication. Features : Up to 1TB in capacity. Centrally manageable with ACCESS Enterprise Fingerprint two factor authentication - Further enhance security and convenience with the biometric capabilities through an ergonomic swipe sensor The H300 is a USB 3.0 encrypted external hard drive. Comes in two versions: Basic and Enterprise. Enterprise version requires management – Basic can later be upgraded to Enterprise but not the other way around. Up to 2TB in capacity. A USB 3.0 interface Centrally manageable with IronKey Enterprise Management Service or Server The H350 is a FIPS Level 3 validated, USB 3.0 encrypted external hard drive. Comes in two versions: Basic and Enterprise. Enterprise version requires management – Basic can later be upgraded to Enterprise but not the other way around. FIPS Level 3 validation 10
11 More Encrypted Solutions Sentry 3 FIPS Sentry EMS EncryptDisc®ENCRYPTED PORTABLE HARD DRIVES More Encrypted Solutions Sentry 3 FIPS Hardware encrypted USB flash drive 256 bit AES encryption Ruggedized design Fast USB 3.0 interface Up to 64GB capacity Centrally manageable with SafeConsole Sentry EMS Centrally manageable with IronKey EMS EncryptDisc® Self encrypting optical media FIPS Validated crypto engine No software or drivers to install A perfect solution for medical, legal and financial practices Available in CD 100 packs The H200 is a FIPS Level 3 validated, hardware encrypted, USB 2.0 external hard drive. Level 3 – This level exceeds Level 1 and Level 2 requirements, and adds physical tamper-resistance and identity-based authentication. Features : Up to 1TB in capacity. Centrally manageable with ACCESS Enterprise Fingerprint two factor authentication - Further enhance security and convenience with the biometric capabilities through an ergonomic swipe sensor The H300 is a USB 3.0 encrypted external hard drive. Comes in two versions: Basic and Enterprise. Enterprise version requires management – Basic can later be upgraded to Enterprise but not the other way around. Up to 2TB in capacity. A USB 3.0 interface Centrally manageable with IronKey Enterprise Management Service or Server The H350 is a FIPS Level 3 validated, USB 3.0 encrypted external hard drive. Comes in two versions: Basic and Enterprise. Enterprise version requires management – Basic can later be upgraded to Enterprise but not the other way around. FIPS Level 3 validation 11
12 Encrypted Cloud Storage withCLOUD ENCRYPTION GATEWAY Encrypted Cloud Storage with SafeCrypt is a “cloud encryption gateway” which provides a layer of encryption between your applications and your cloud storage provider. SafeCrypt creates an easy to use virtual drive which serves as the encryption gateway. Simply point your application to the virtual drive letter and SafeCrypt fully encrypts your data before it leaves your computer and then passes it to your cloud storage service provider fully encrypted. SafeCrypt allows any application such as Microsoft Office, Autocad, Photoshop and Quickbooks to seamlessly utilize military grade AES 256 bit encryption for storing your data on virtually any cloud storage service such as Dropbox, Google Drive, Box or Bitcasa. With absolutely no custom configuration or setup, you can instantly secure your data to meet regulatory compliance requirements established by HIPAA, SOX, DHS, GLB and PCI. SafeCrypt for Windows was released in December The Mac version was release in March IOS mobile client was launched in June An Android mobile client was launched in 2016. The development plan is to integrate SafeCrypt with SafeConsole creating an enterprise level encrypted cloud storage system. 12
13 CENTRAL MANAGEMENT SafeConsole SafeConsole enables your organization to inventory, audit, manage and kill your SafeConsole enabled encrypted endpoints. Central management allows an organization to quickly and easily establish a command center to remotely manage their secure USB devices It works by allowing the USB devices to “talk” to the service (hosted in the cloud or on prem) and appointed administrator(s) can “tell” the USB device commands all through an internet connection. This allows an administrator(s) to enforce policies, track, update and disable devices, remotely reset passwords and more. DataLocker offers two management platforms: IronKey EMS and SafeConsole SafeConsole is compatible with DataLocker Sentry 3 FIPS, DataLocker DL3 and DL3 FE, Kingston Data Traveler 4000 and more. *EncryptDisc and SafeCrypt support coming soon (2017) Available as a cloud hosted service or on prem server. Cloud service is a single tenant solution with a choice of 9 data center locations around the world Integrate With Active Directory for Easy Provisioning Identify When and Where Your Managed Device is Used Inventory Manage Device Inventory, Lifecycle and Maintenance Configure With and Advanced Management Feature Set
14 IronKey EMS CENTRAL MANAGEMENTProtecting your data, your mobile workforce, and your organization is easy with the IronKey EMS. You can quickly and easily establish a secure storage command center for administering and policing the use of IronKey encrypted Workspace devices for Windows To Go and Enterprise storage drives. IronKey Enterprise Management Service is compatible with S100, S200, S250, D200, D250, S1000, W500, W700, H300 and H350 A minimum of two managed drives are required (recommended is three drives) – one for disaster recovery, one for the system admin and the third to be used. Without the system admin device you cannot access the management portal. If a customer only has one system admin device, and loses it, they will lose access to the account and you will have unhappy customers that they were not advised of this before hand. New service sales requires a sign up form, however existing customers who wish to add devices to their current management service requires an Enterprise Account number. The Enterprise Account number is key in preventing multiple accounts for one customer. Available: cloud hosted Service and on prem Server (cloud service is multi-tenant but no user data is stored)
15 Anti-Malware Service for your Managed DevicesPowered by Intel Security, McAfee is a portable anti-virus system that runs in the background of your centrally managed devices. Key Features -Automatically scans viruses, worms, trojan horses and other malware threats. -Automatically removes any viruses found on the device. -Reports to central management console when and where the virus is removed. -Automatically updates when your centrally managed devices are unlocked.
16 TRUST DATALOCKER 70 % OF FORTUNE 100 COMPANIESREPRESENTATIVE CLIENTS 70 % OF FORTUNE 100 COMPANIES AND NUMEROUS PUBLIC SECTOR AGENCIES TRUST DATALOCKER THOUSANDS OF CLIENTS GLOBALLY
17 Representative ClientsVERTICAL/INDUSTRY LEGAL ENTERPRISE GOVERNMENT HEALTHCARE FINANCIAL
18 United States Army CUSTOMER CASE STUDYProject: ACC Rock Island – Health Information Collection Solution: DataLocker DL2 Use Case: The US Army needed a way to encrypt, collect and transport sensitive medical records. The DataLocker Enterprise’s plug and play, platform independent design allowed the Army to deploy a fail safe data encryption system without requiring any software or drivers while maintaining compliance with encryption standards (FIPS 140-2). Results: Saved the Army hundreds of thousands of dollars and thousands of man hours in security testing and system configuration.
19 Walt Disney CUSTOMER CASE STUDYProject: Needed to Transfer Prerelease Versions of Upcoming Films Securely Solution: DataLocker DL3 Use Case: Walt Disney needed a way to encrypt, collect and transport sensitive prerelease films. DataLocker’s agnostic solution (works for Macs or PCs) allowed Disney to safely share and transfer prerelease versions of upcoming films. USB 3.0 speeds paired with an SSD option allows faster more reliable data transfers for all their studio needs. Results: Disney felt this was an inexpensive way to prevent a costly leak and exposure of sensitive information like the one Sony experience in 2014.
20 Price Waterhouse CoopersCUSTOMER CASE STUDY Price Waterhouse Coopers DataLocker SafeConsole Project: Needed a way to manage and protect thousands of USBs worldwide Solution: DataLocker Sentry and SafeConsole Use Case: As a global professional services firm, with thousands of consultants working offsite with confidential client data that needs to be shared and carried around at all times, having a centralized management system that allows administration and control of USB devices was critical. SafeConsole was easy to deploy and works with many leading providers of encrypted storage devices. Lost data could easily mean a lost deal and severe damage to the reputation of the company. Results: Deployed to thousands of users
21 Saint Luke’s Health SystemCUSTOMER CASE STUDY Saint Luke’s Health System Project: Needed secure, low-cost method of delivering and transporting medical records including diagnostic imagery Solution: DataLocker EncryptDisc Use Case: Saint Luke’s Health System needed a way to provide patient records (like MRIs, etc.) in a HIPPA compliant manner. They chose DataLocker EncryptDisc because the solution allowed them to easily burn sensitive information to optical media (CD/DVD) without any special software or drivers. DataLocker also printed custom labels for the Healthcare company to keep with their brand image. Results: Medical records were encrypted and put onto optical media at a cost that was 90% less than an encrypted USB flash drive.
22 Top Ten Multinational Law FirmCUSTOMER CASE STUDY Top Ten Multinational Law Firm Project: Needed a secure method of collecting and transporting large volumes of sensitive client data from its client’s site to the firms e-discovery department Solution: DataLocker DL3FE Encrypted Hard Drive Use Case: The device uses a high speed USB 3.0 interface and is platform independent requiring no software or drivers. Hardware based encryption allowed the law firm to encrypt client data “on the fly” without having to install any software on the clients system. Read-only feature ensures drive contents are not compromised by users. Results: Transfer was completed in less that 1/10th (10 hours vs 120 hours) of the time saving and saved $10,000 in direct cost. The client was 100% satisfied that the collected data was fully secured and accounted for.