Customer isolation
Each customer has its own PostgreSQL database and its own file storage. Starter runs on a shared platform: the application is shared, and each request is tied to the customer through the address of its workspace. Enterprise gets a dedicated instance, hostable in Switzerland on request.
Access
Accounts and permissions are managed in ark.stock. Two-factor authentication can be enabled to strengthen sign-in.
Transport and hosting
Web traffic uses HTTPS. Application infrastructure is hosted exclusively in Europe: production at netcup in Vienna (Austria, European Union), with a replicated standby copy at Infomaniak in Geneva (Switzerland). Some external services may process data strictly required for their function; they are described in the privacy policy.
Backups
Databases are exported every day and continuously replicated to Geneva. Encrypted Borg archives are kept in Switzerland: 14 daily, 8 weekly and 24 monthly. A restoration only affects the relevant customer's data.
Report an issue
For a security question or responsible disclosure, write to [email protected].