./security-compliance
Security built into the design.
How we protect each customer's infrastructure, data and access.
Principles
Every environment is built with least-privilege access, encryption, logging and tested recovery. Responsibilities between Vonahost and the customer are written in the contract.
Controls
How we protect your environment.
- Physical security
- Data centers with controlled access, surveillance and redundant power and cooling.
- Network security
- Firewalls, private networks, segmentation and DDoS protection.
- Identity and access
- Individual accounts, MFA and periodic access reviews.
- Encryption
- TLS in transit; storage and backups encrypted at rest.
- Monitoring and logging
- Monitoring with alerts and retained access logs.
- Backup and recovery
- Offsite backups and documented, tested restore procedures.
Shared responsibility
Clear responsibilities for each team.
Each proposal states what Vonahost manages and what your team owns, from hardware to application and users.
- VonahostFacilities, hardware, network, virtualization and managed services as contracted.
- CustomerApplication code, user accounts, content and data classification.
- SharedOperating systems and security settings, depending on the service level.
Compliance
Support for compliance obligations.
Documentation and controls for customers under privacy and sector regulations.
Privacy laws
Data processing terms aligned with CCPA, GDPR and LGPD, per jurisdiction.
01Data location
Each environment's location, fixed in the contract.
02Audit support
Customers get control docs, access logs and incident procedures.
03Incident response
Defined process to detect, report and fix security incidents.
04
Facilities
Access restricted to authorized staff.
01Network
Segmented networks per customer.
02Hardware
Hardware tracked from installation to disposal.
03
Next step
Review our controls with your security team.
Get our security brief or send your questionnaire.