Customer isolation
Each customer has a separate application instance and PostgreSQL database. Business data is not combined in a shared customer database.
Access
Accounts and permissions are managed in ark.stock. Two-factor authentication can be enabled to strengthen sign-in.
Transport and hosting
Web traffic uses HTTPS. Application infrastructure is hosted exclusively in Europe, with production in the European Union and continuity in Switzerland. Some external services may process data strictly required for their function; they are described in the privacy policy.
Backups
Instance backups are run and retained according to an operational rotation. Restoration targets the relevant customer instance.
Report an issue
For a security question or responsible disclosure, write to security@ark.swiss.