How secure is our data with hosted app

[900FE]

We are evaluating your helpdesk product, like the title says how secure is our data when accessing the hosted app via the web. Does it use SSL?

Thxs.

[jstanden]

Hey there!

For SSL, sure. People generally provide us with a certificate for a custom URL (support.yourcompany.com) . That domain would just need to point to our machines.

We've also been meaning to set up some wildcard SSL certifications for the *.cerb4.com URLs. That's pretty high on our internal agenda.

The main thing to consider otherwise is the standard disclaimer -- that e-mail being redirected to our machines, or fetched from a non-SSL POP3 from our machines, is being transmitted over the network. It's highly unlikely that any machine (ISP, etc.) between you and us is going to read it, but it's still possible.

In terms of machine security, we don't provide direct FTP or SSH access to clients on those machines. We're running Debian Etch and the latest stable patches are constantly applied.

In terms of redundancy (disaster security), we're running RAID-10 on all Cerb hosting machines (mirroring + striping) and we do weekly off-server backups of the database content.

Thanks!