We build and run our services carefully and take security seriously. Here is what we do, and what you should do too.
Our side:
- Isolation: virtual servers run on KVM, so each customer's server is kept separate
- Network: firewall-based DDoS protection is included with every service
- Staff access: our staff don't look at your content unless they need to give support you ask for, deliver a managed service, investigate abuse or a security threat, or because the law requires it
- Confidentiality: we keep your content, configuration and credentials confidential and share them only with people who need them to run the service
- Payments: card payments are processed by Stripe
- Data location: customer data on our services is stored in Canada (see "Where is my data hosted?")
Your side:
- Use a strong, unique password and turn on two-factor authentication under Security in your profile menu
- Review your active sessions and recent login activity on the same page
- Keep the software on your servers updated
- Keep your own backups somewhere other than the same service. Backups are a convenience, not a guarantee
We don't hold third-party security certifications. Our Terms of Service and Privacy Policy explain how we handle your content and personal information.