Security Measures

The following security measures are in place.

Network and Data Communication

Remote access necessitates a VPN connection as well as two-factor authentication.

Antivirus, Malware Protection and Path Management

Automated vulnerability scans are performed on a regular basis to detect web application vulnerabilities.

Backup and Restore

Static resources (images, files, scripts, etc.) in Website Builder are automatically backed up on a daily basis using AWS AMI. Furthermore, data is replicated to a different AWS data centre.

Monitoring and Alerts

We use a number of automated monitoring tools to detect anomalies and misuse.

Access Control

A central firewall protects all data communication networks with external access. Functionality and usage are separated in networks.

When accessing critical systems, networks, firewalls, SSL certificates, and virtual private networks (VPN) are used.

SSL encryption is used for all TCP outbound communication.

Website Builder's servers are protected against malware and intrusion detection systems.

AWS conducted central patch management on a regular basis for security-related updates to ensure that known security flaws cannot be exploited to gain unauthorised access to systems and data.

Website Builder makes use of AWS automated backup features, which enable it to restore the database state and data to any point in time within the previous 14 days. Furthermore, Website Builder uses the RDS API to perform periodic database snapshots.

Website Builder will not provide user account information unless proper verification of the account owner's identity is established.

Delete and Destroy

Customer Data will be kept only as long as there is an active agreement between Website Builder and the partner or customer, and as long as it serves the purposes for which the data was collected. Unless there is a legal or contractual obligation to retain data for an extended period of time, the customer's data will be deleted or at the very least personal data will be removed upon the expiration of an agreement with the customer.

Physical Security

The "need to know" principle governs access to Website Builder's systems and applications. Admin access necessitates the use of multi-factor authentication as well as passwords that adhere to the Website Builder password policy.

The platform's password policy is enforced for all users (account owners, team members, and customers). The password has been fully encrypted and hashed.

The activities of Website Builder are based on AWS cloud computing services.