Security and hosting

The controls presented here match the scope actually operated.

  • Business dataSeparate instance
  • HostingEU production · CH continuity
  • Sign-inTwo-factor available

Customer isolation

Each customer has a separate application instance and PostgreSQL database. Business data is not combined in a shared customer database.

Access

Accounts and permissions are managed in ark.stock. Two-factor authentication can be enabled to strengthen sign-in.

Transport and hosting

Web traffic uses HTTPS. Application infrastructure is hosted exclusively in Europe, with production in the European Union and continuity in Switzerland. Some external services may process data strictly required for their function; they are described in the privacy policy.

Backups

Instance backups are run and retained according to an operational rotation. Restoration targets the relevant customer instance.

Report an issue

For a security question or responsible disclosure, write to [email protected].

Let’s define your ark.stock scope.

Describe your equipment and workflows to receive a suitable proposal.

Request a quote