Infrastructure
The service is hosted with Amazon Web Services (AWS), in European regions. The architecture is redundant and backed up, and production environments are isolated from development environments.
Data protection
- Encryption of data in transit and at rest.
- Segregation of access and logging of sensitive operations.
- No bank card data stored on application servers.
- Regular backups and a tested recovery plan.
Responsible disclosure
If you discover a vulnerability, write to securite@skoleom.com with the information needed to reproduce it. The group undertakes to acknowledge receipt within two working days, not to pursue researchers acting in good faith, and to keep you informed of the fix.
Availability
Service status is published on the Service status page.