AMAG Pharmaceuticals

Access Management for Google Docs

The IT team at AMAG Pharmaceuticals implements CloudLock for Access Management for Google Docs.

AMAG Pharmaceuticals, Inc. is a publicly traded biopharmaceutical company that develops and commercializes therapeutic and diagnostic iron oxide nanoparticles. The company utilizes its proprietary technology to treat iron deficiency anemia. AMAG manufactures, Feraheme® (ferumoxytol) Injection for intravenous (IV) use.

AMAG aspires to be a leading partner to the healthcare community by ensuring outstanding collaboration in supporting effective research as well as supporting robust education efforts. AMAG also takes seriously its obligations as a corporate citizen by supporting important charitable causes through donations.

Business Problem

AMAG is one of the first pharmaceutical companies to adopt cloud services and migrate to Google Apps. As a publically traded pharmaceutical company, AMAG faces the additional challenge of complying with SOX and FDA regulations as well as protecting the company’s IP.

With the adoption of Google Apps and storing and creating documents in Google Docs, the IT team at AMAG recognized a need for a solution that would provide visibility into user adoption, document growth, document classification and control and visibility of document exposure to address compliance and governance requirements.

The CloudLock Solution

“CloudLock gives me a critical layer of IT security and the controls I need for our company’s Google Docs. It provides visibility into which documents users are creating and how they are sharing them. I can also monitor adoption and make sure users adhere to our document sharing policies and procedures,” said Nathan McBride, Executive IT Director at AMAG Pharmaceuticals.

With CloudLock, the IT team at AMAG Pharmaceuticals is able to:

• Gain visibility into all documents in the domain and see their sharing settings
• Fully control document permissions (add or remove collaborators, change ownership, and change collaborator access rights)
• Monitor and receive exposure alerts, getting email alerts with newly exposed documents and changes in permissions (the same report is also available from within the application)
• Review all changes for documents created or shared with their domain (view changes in ownership and in access rights)

Access Rights Management

CloudLock gives Google Apps domain administrators an effective way to manage documents, folders and users in the domain as well as documents shared from outside the domain.

CloudLock users can change and fix permissions for all documents and folders, including those they are not shared on. They can audit and secure sensitive documents while having an audit trail for all actions performed with CloudLock.

Monitoring and Alerting for Daily Changes

“One of my favorite features in CloudLock is the exposure email alert. I have set the monitoring option to send me daily alerts, so every morning when I get to the office I quickly review all new exposures and all the changes that have happened in our domain,” said McBride.

CloudLock provides ongoing monitoring of the entire domain with email alerts on newly exposed documents and changes in permissions for existing documents. The same report is also available from within the application with the ability view the specific documents. Users can select a time range and view at once all the changes that happened in their domain for a specified time.

With this feature, Google Apps administrators can stay on top of all changes in the domain with a very minimal time investment.

Compliance and Regulations

CloudLock’s features for auditing all users and all documents in the domain (as well as tracking all changes) give organizations the tools they need to generate audit reports to comply with regulations or internal governance policies. CloudLock also provides a tamper-proof audit trail, which logs all admin activities and changes for audit purposes.

As a publicly traded pharmaceutical company, AMAG must comply with SOX and FDA regulations. It needs to be able to enforce the governance structure for it’s financial documents and provide a full audit trail for every document submitted to the FDA (FDA 21CFR11).

“CloudLock also helps with our compliance and governance needs by giving us controls over sensitive documents, providing a full audit trail for each document in our domain,” said McBride.

A Google Apps Marketplace Application Running on Google App Engine

CloudLock is a Google Apps Marketplace application running on Google App Engine. This ensures that all meta-data collected and all application processing remain within the same SAS70-II certified environment that supports Google Email, Calendar, Docs and other applications.

As a Google Apps Marketplace application, CloudLock is easy to install, and uses OpenID for single sign-on and SSL for all communications.