Enviance Receives SAS 70 Type II Certification


Environmental Compliance Management Leader Achieves Industry Standard for Ensuring Sensitive Data Remains Protected and Secured

CARLSBAD, CA - June 18, 2008 - Enviance, the leading provider of Internet-based systems for the management and automation of environmental, health and safety (EHS) compliance activities and greenhouse gas (GHG) emissions management, today announced that it has been certified as compliant with Statement on Auditing Standards No. 70: Service Organizations (SAS 70) Type II, the highest level of security and internal control certification for software companies.

The Sarbanes-Oxley financial reporting act, the Gramm-Leach-Bliley privacy act, the Health Insurance Portability and Accountability Act, and California's SB1386 notification act all require that companies take steps to assure protection of sensitive data. SAS 70 sets the standards against which auditors assess the internal controls of a service organization.

Companies that attain SAS 70 Type II certification do so only after thorough, third party audit of the company's internal control activities, including control over information technology and related processes.

"SAS 70 Type II certification tells the world that independent third party auditors have confirmed that our software services, which are vital for greenhouse gas and environmental, health and safety compliance management, are secure and reliable," stated Lawrence Goldenhersh, president and CEO of Enviance. "In this era of fast moving technology innovation, customers should demand concrete evidence substantiating their provider's claims that customer data is safe and is protected by well developed, highly controlled process.

This SAS 70 Type II certification provides our customers, which include global leaders in the utilities, energy, chemical, and pharmaceutical industries, with confirmation that Enviance continues to operate at the highest level of professional excellence."

Enviance's software platform is the Enviance System, an Internet-based service that allows facilities to centrally manage and report, in real-time, all aspects of environmental regulatory compliance including: greenhouse gas, NERC, Title V, Sarbanes Oxley, water and waste requirements among many others.

As one of the earliest adopters of the Software-as-a-Service (SaaS) model, Enviance customers have always accessed the Enviance System over the Internet, avoiding the need to purchase any hardware or software, and dramatically improving overall deployment time, operational efficiency, and cost effectiveness.

"Helping companies improve their ability to timely discharge their environmental responsibilities and manage their greenhouse gas emissions requires the management of a massive amount of information, in real time" said Sergey Blyashov, chief technology officer of Enviance. "Our SAS 70 certification assures our customers that each of the hundreds of millions of data points we are trusted to manage each day are safeguarded by well developed, highly controlled process that meets the highest standard of excellence."

About Enviance

Enviance delivers software that automates and improves the management of environmental, health and safety compliance and greenhouse gas footprint and reduction activities. The first and leading operator of Internet-based compliance software as a service, the Enviance System requires no hardware or software and is sold on a subscription basis, offering customers the flexibility to scale the solution as their needs change over time. Many leading organizations trust Enviance to help them reduce the time and cost of managing compliance activities, retain institutional knowledge, confidently certify compliance and manage greenhouse gas.

Founded in 1999, privately held Enviance is based in Carlsbad, California. For additional information, visit enviance.com; to request a demonstration, e-mail demo@enviance.com

Steve Fiore

SZPR, Inc.

Direct: 858-427-1667

fiore@szpr.com

szpr.com

All Topics