All of Crowdstack’s plans include TLS/SSL for encryption of data transmitted across the Internet.
Crowdstack’s data is stored in multiple systems including MySQL, MongoDB, and distributed file systems for media and attachments. User passwords are encrypted with strong, one-way cryptography utilizing Blowfish hashing with a randomized salt to ensure the security of user sign-in credentials.
Crowdstack includes redundant databases with multi-layered backup protection. Backup options include daily data backup, point-in-time backups, and redundant storage arrays. Includes online and offline backups. Weekly off-site backups are performed.
All off-site backups are encrypted before being transferred across the wire. Backups are multi-tiered: local database/file server backups, local replicated backups (2 copies), and one off-site Disaster Recovery backup.
We utilize multiple data centers to provide the Crowdstack service. For Customers not on "Complete" plans, we host in data centers in the United States. Crowdstack Complete customers, however, have a choice of data center in the US, EU, UK, Canada, India, and Singapore.
The data center vendor utilized for Complete customers is currently: Digital Ocean. Learn more about DigitalOcean’s Data Security and Certifications. Note that we may change data center vendors at any time, but will update this page when that happens.