Skip to content
Home/Trust
Trust

Security and compliance

Where the service runs, how it is protected, and how to report a vulnerability to us.

Infrastructure

The service is hosted with Amazon Web Services (AWS), in European regions. The architecture is redundant and backed up, and production environments are isolated from development environments.

Data protection

  • Encryption of data in transit and at rest.
  • Segregation of access and logging of sensitive operations.
  • No bank card data stored on application servers.
  • Regular backups and a tested recovery plan.

Responsible disclosure

If you discover a vulnerability, write to securite@skoleom.com with the information needed to reproduce it. The group undertakes to acknowledge receipt within two working days, not to pursue researchers acting in good faith, and to keep you informed of the fix.

Availability

Service status is published on the Service status page.