Security measures you can show your board or regulator.

Each measure below is written into Annex 2 of our data processing agreement.

Protecting your apps

Limited permissions

Your apps run with only the system permissions they need, separated from our own systems.

Attack detection

Software on our servers inspects every request to your apps and identifies harmful ones.

Passwords and secret settings

Your secret settings, and every app's passwords to its own database, are stored encrypted.

Protecting your data

Encrypted backups

We encrypt your backups with a key for each app before they leave our servers, and store them apart from the servers that run your apps.

Restoring data

Most apps can return to any minute of their backup period, and the rest to any night's copy. Every night we check the backups that restore by the minute, and our team is alerted if one fails.

Where your data is kept

Our terms name the country where your apps, their data and their backups are kept.

Controlling access

Roles

Members are owners, admins, developers or viewers. Only owners and admins can delete apps, restore backups, add credit or manage members.

Admin passwords

Only your team's owner can reveal or reset an app's admin password, and each time is recorded in your audit log.

Audit log

Builds, releases, rollbacks and changes to your apps, settings, domains and members are logged with who made them, when, and from which address.

Signing in

People sign in with Google, Apple, GitHub, GitLab or Bitbucket, so there is no Clusterz password to steal.

Staff access

Our staff open your apps only at your request, when running or securing Clusterz needs it, or when the law requires it. Their tools never show the data inside your apps.

Reporting a security problem

Email contact@clusterz.eu with the details of what you found.