Whistleblower
Revision as of 09:49, 16 September 2021 by 80.161.14.74 (talk)
Hosting setup
The hosting is located at Amazon Webservices Stockholm data center.
Supported services
- SSL certificates are automatically updated monthly from LetEncrypts
- UptimeRobot polls the server each minute checking
- Access to database
- Sufficient storage and RAM
- Database is dumped nightly
- Replicated to encrypted storage in EU
- XXX
Security setup
The following security and compliance features are active
- Password policies
- Multifactor authentication (SMS)
- Request throttling
- Storage encryption (AWS + LUKS)
- Transport encryption
- Activity and data logging
- Versioning
- GDPR deletion policies (90 days)
- Event and system logging
Note that request logging have been disabled actively, in order to secure anonomity of the users