Protecting your information and the information of your customers or end-users is extremely important to us. We have a comprehensive information security policy that approaches the safety of customer data from technical, legal, and operational vantage points. The following is an outline of Hostway’s information security policy, but does not represent a binding agreement or guarantee.

Data Centers

We locate our servers in well-known co-location facilities (“data centers”) in the United States and Europe. Each data center provider has a SOC 2® – System and Organization Controls (SOC) Type 2 certification for Service Organizations, and provides a full complement of physical security measures including guarded entry, 24-hour surveillance, and biometric access to equipment areas. In addition, our data center partners use state-of-the-art fire prevention and backup power systems to minimize the possibility of physical or electrical failure as much as possible.

Abuse

We want to ensure that our servers, network, and platform services are used for hosting legitimate services that are supported by the global Internet and business communities. To meet this goal, we have a dedicated team to oversee the compliance and risk liability of our services. If we see customer accounts or specific services with signs of suspicious activity, we take immediate action. More information can be found in our Terms of Service. If you identify potential misuse of our services or website, please report it to us.

Network Security

As the medium through which any data breach or service-affecting attack would propagate, the security of our data network is among our highest security concerns. We continuously monitor our network for signs of abuse, including attacks targeted to or originated by customers, brute force attempts, and network scans which are often precursors to malware infections. We take specific actions on hosted services by default to protect network security:

• Automatically block incoming or outgoing DoS/DDoS attacks
• Block certain ports that are often used for abuse
• Block access from blacklisted networks and IP addresses

Backups & Disaster Recovery

The subscriber is responsible for maintaining a complete and current copy of their VPS and any files or software placed there by the customer. SolVPS will not be responsible for providing backups of any specific file, or VPS system, due to loss by customer negligence or another event.

SolVPS is NOT RESPONSIBLE for any files, software, or other data lost by the customer.

SolVPS makes regular internal backups of internal system configurations, host server configurations, and databases. These backups are not intended to keep up-to-date backups of customer data.

Although SolVPS backups may include customer data for the purpose of recovery from disasters and critical system failures, these backups are not to be relied on by the subscriber, nor does SolVPS guarantee that any such backup can be provided directly to a customer.

Privacy

Your personal privacy is of the highest importance to us, and we support your right to complete control over your personal data. We will never share your contact information or other personal data with third parties for marketing purposes, nor for any other purpose, except as stated in Data Subprocessors.

We abide by all US and EU regulations for data collection and transmission. We host customer data in the United States. Where possible, we always:

• Use 2048-bit commercially-signed SSL to transmit data requests and responses between parts of our website, applications, and third-party services
• Pseudonymize and cryptographically encrypt personal data stored in our database
• Encrypt IDs and identifying data present in URIs