Data security
We work to keep your data safe in range of different areas.
Hosting
White Fuse is hosted on Heroku, a platform as a service (PaaS) that enables developers to build, run, and operate applications entirely in the cloud. Heroku is owned by Salesforce.
White Fuse is hosted in Heroku's EU region and data is encrypted at rest.
View Heroku's own security information here: https://www.heroku.com/policy/security
Data in transit
All traffic through your website and White Fuse account is encrypted with an SSL certificate. If you choose our recommended approach of using our Cloudflare account we manage this for you. If you create your own Cloudflare account or equivalent you are responsible for maintaining this SSL connection.
Direct access to data
You are also responsible for making sure all your admin passwords safe. Keep your passwords strong and don't share them with others.
We support two factor authentication and encourage you to use this to provide additional security on all Administrator accounts.
Data loss
White Fuse provides in-app tools to help guard against accidental data loss, such as maintaining deleted pages and contacts for thirty days before they are permanently removed.
We don't offer any way to export your website content as a whole but contact information can easily be exported in CSV format. If you want to put in place your own backups we recommend the following steps:
- Regularly download all contacts from your database and store this in a highly secure manner.
- Maintain a copy of written content that exists only on the website.
- Maintain a copy of images that exist only on the website.
If you store sensitive data in spreadsheet form you must ensure that the storage of this data meets all of your organisation's data protection standards.
System backups
We take regular backups of the entire White Fuse platform to cover emergencies and these are stored securely on the servers we use within the EU. In the unlikely event that the White Fuse platform became unable to function, our development team would work to resolve the issue immediately.
Service level agreement
We'll do everything we can to achieve 100% uptime and when we fall short we'll explain why and how we'll do better next time.
For more detail refer to our Data Processing Terms.