Security and backups
Your data, protected as if it were ours.
Perfect security does not exist — be wary of anyone who promises it. What does exist: serious layers of protection, backups that can actually be restored, and a team that reacts quickly. Here is what we do, concretely.
Backups: our insurance policy, and yours.
Daily and automatic
Every night, your files, databases and email are backed up — with no action from you and no surcharge.
Encrypted and off-site
Backup copies are encrypted before transfer and the storage provider does not hold our decryption keys.
Up to six months of history
Retention: 7 daily, 4 weekly, 6 monthly. A problem discovered weeks later remains fixable.
For the curious: backups are done with restic (encryption before transfer, deduplication), to off-site object storage. Restorations are tested periodically under a documented internal procedure — not improvised at 3 a.m.
Security, in layers.
On the network
- Firewall on every machine, ports reduced to the strict minimum
- Automatic blocking of repeated intrusion attempts
- TLS encryption (Let's Encrypt) on all sites, renewed automatically
- DNSSEC on the DNS zones we manage
On access
- Administrative access by keys only, never by simple password
- Multi-factor authentication on sensitive interfaces
- Isolation of client accounts from each other
- Logging of administrative access
What we do not sell: “2 Tbps DDoS protection” or “military-grade security” — unverifiable figures you read elsewhere. In the event of a major attack beyond standard protections, our SLA honestly describes what applies.
Questions about backups.
How often is my site backed up?
Every night. We keep 7 daily, 4 weekly and 6 monthly backups: you can go back up to six months.
Where are backups stored?
Off-site, with a storage provider located in the United States. Backup copies are encrypted before transfer and the storage provider does not hold our decryption keys.
How do I request a restoration?
An email or a call is enough. Tell us what to restore (a file, a database, the full site) and which date to go back to; we handle the rest and verify the result with you.
Are restorations really tested?
Yes, periodically, under a documented internal procedure — on real data. That does not mean every backup of every client is restored individually; it is regular validation of the process so it works when we need it.