Hosted in the EU
Every system I run, both for you and for myself, is hosted with providers that have their data centres within the EU. That makes it easier for both you and me to live up to the GDPR.
Backups every day
I take backups of all my systems every night. The copies are encrypted before they leave the server and are stored separately from the systems themselves, so that a problem on one server does not affect the copies. I also test regularly that it is actually possible to restore from them, because a backup is only worth something if it works the day you need it.
Closed doors
My administrative tools and server logins cannot be reached from the internet at all, only over encrypted connections from approved devices. What is visible from the outside is the services you actually use, and nothing more.
Updated and monitored
Security updates are installed automatically, and I collect logs from all systems in one place so that I quickly see if something is out of the ordinary. Each system also has its own permissions, so that a problem in one place does not give access to the rest.
As little access as possible
I only fetch the data I need to do the job, and I am the only one who has access to it.
Have you found a security problem?
If you think you have found a vulnerability in one of my systems I would like to know about it. Email hej@advesign.com and I will get back to you as soon as I can.