HomePlatform
Security at Cyberfusion
This article provides an overview of the security measures Cyberfusion takes to secure your data.
This article also contains tips on what you can do to keep your data safe - because security is a joint effort.
Organisational security measures
ISO-certified data centres
All data centres used by Cyberfusion are ISO-certified.
GDPR-compliant
All Cyberfusion services are GDPR compliant.
Physical infrastructure (such as hardware) is located in Europe, and is managed by Cyberfusion.
Find our data processing agreement (DPA), including sub-processors, on our website.
Screening
All candidates are screened extensively before hiring.
Among others, employees are required to have a government-issued Certificate of Conduct.
Awareness
All Cyberfusion employees follow an ongoing security awareness program - keeping them aware of privacy issues, phishing tactics, and more.
Questions via the platform
Didn't ask a question via the platform? We will not share confidential information nor make changes at your request.
After all: we can only confirm your identity via the platform.
Technical security measures
Multiple data centres
Highly available Cyberfusion services run in multiple data centres.
These data centres are fully separated - technically and geographically.
If a data centre goes offline - for example, due to a natural disaster - then your services can be restored quickly.
Aside from the standard backups, backups are also made to off-site data centres.
Which services are highly available?
Apache nodes used by Cyberfusion Sites is highly available. If the data centre in which this node runs fails, sites remain online.
Other nodes - such as MariaDB and Redis nodes - are not. If the data centre in which such a node runs fails, sites depending on it go offline.
Every node runs in a data centre. Nodes are spread over as many data centres as possible.
If you have multiple nodes in a cluster with the same group - such as MariaDB - then that service remains online when a single node with that group fails.
If only one node in a cluster has a certain group, failure of that node causes that service to fail.
Periodic maintenance
Periodic maintenance is performed on Cyberfusion services - keeping them up-to-date and secure.
Read more on our website under 'Maintenance'.
Modern internet standards
Cyberfusion uses all relevant modern internet standards.
This has been independently confirmed by Internet.nl, making Cyberfusion an 'Internet.nl compliant hoster'. Cyberfusion is also listed in their 'Hall of Fame for Hosters'.
All Cyberfusion services support IPv6 and use it by default.
This has been independently confirmed by ipv6provider.nl.
Domains registered at Cyberfusion use DNSSEC by default.
The Cyberfusion network uses RPKI.
Confirm this on Routinator.
Cyberfusion MX records provide TLSA records for DANE.
Cyberfusion web and mail services support HTTPS/SSL/TLS.
What can you do?
The platform offers many security features, including:
- Enforcing 2FA for all users
- Multiple users with roles
- Malware detection using maldet
- Every Cyberfusion Core customers has a dedicated vLAN. Different customers' nodes are therefore completely segregated.
Found a security issue?
Report the security issue via the 'Responsible Disclosure Policy'.