Security Statement

January 06, 2023

• We use encrypted connections (TLS) whenever it is possible

• We enforce 2FA (two-factor authentication) for core systems

• We use source code dependency scanning tools

• We host data provided by customers on DigitalOcean, Inc. (New York / NYC1)

• Data backups are created daily - Amazon Web Services (AWS / Ohio us-east-2)

• Daily data backups are available for a minimum of ten subsequent days

• Our services are hosted on DigitalOcean, Inc.

Security Bug Fix Policy

The following table describes when we resolve security bugs in our products:

Severity	Resolution time
Low	within 25 weeks of being reported
Medium	within 6 weeks of being reported
High	within 4 weeks of being reported
Critical	within 2 weeks of being reported