Security measures you can show your board or regulator.
Each measure below is written into Annex 2 of our data processing agreement.
Protecting your apps
Limited permissions
Your apps run with only the system permissions they need, separated from our own systems.
Attack detection
Software on our servers inspects every request to your apps and identifies harmful ones.
Passwords and secret settings
Your secret settings, and every app's passwords to its own database, are stored encrypted.
Protecting your data
Encrypted backups
We encrypt your backups with a key for each app before they leave our servers, and store them apart from the servers that run your apps.
Restoring data
Most apps can return to any minute of their backup period, and the rest to any night's copy. Every night we check the backups that restore by the minute, and our team is alerted if one fails.
Where your data is kept
Our terms name the country where your apps, their data and their backups are kept.
Controlling access
Roles
Members are owners, admins, developers or viewers. Only owners and admins can delete apps, restore backups, add credit or manage members.
Admin passwords
Only your team's owner can reveal or reset an app's admin password, and each time is recorded in your audit log.
Audit log
Builds, releases, rollbacks and changes to your apps, settings, domains and members are logged with who made them, when, and from which address.
Signing in
People sign in with Google, Apple, GitHub, GitLab or Bitbucket, so there is no Clusterz password to steal.
Staff access
Our staff open your apps only at your request, when running or securing Clusterz needs it, or when the law requires it. Their tools never show the data inside your apps.
Reporting a security problem
Email contact@clusterz.eu with the details of what you found.