A platform subscription includes hosting and ongoing operation of the platform. This article describes the responsibilities covered by the platform vendor and what that means for your organisation's IT team.
Infrastructure
The platform is hosted on AWS. The vendor manages all cloud infrastructure required to run the platform, including compute capacity, storage, networking, and the platform architecture itself. With the exception of locally installed connectors, your organisation does not manage any hosting infrastructure.
Software and Maintenance
The subscription covers licensing and management of operating systems, databases, and supporting application software including security tooling. The vendor handles all platform maintenance, database administration, software patching, and infrastructure upgrades. Your organisation does not need to manage these tasks.
Security Controls
The following security controls are applied at the platform level:
All instance components are stored securely.
Files submitted to or generated by the platform are checked for malicious content.
Data in transit is encrypted using TLS 1.2 or later.
Data at rest is encrypted using AES-256.
Network, firewall, and infrastructure security rules are managed by the vendor.
Backup and Recovery
The platform performs regular backups throughout the day. Backup restoration procedures are tested regularly. Data is backed up to a separate location to reduce the risk of loss.
The default retention policy is daily backups retained for 7 days and monthly backups retained for 3 months.
Disaster recovery processes are in place to restore service following infrastructure or system failures, with defined Recovery Point Objectives (RPO) and Recovery Time Objectives (RTO). Contact support for details on your instance's specific recovery objectives.