HelpSpot Cloud Infrastructure

HelpSpot Cloud is hosted on Amazon's Web Services (AWS). Amazon manages risk and undergoes risk assessment to ensure compliance with industry standards. Each HelpSpot cloud instance is hosted on its own dedicated virtual private server in either the US or EU. HelpSpot Cloud isolates each customer to it's own instance and within the selected region.

Amazon's data centers have been accredited under:

• ISO 27001
• SOC 1 and SOC 2/SSAE 16/ISAE 3402 (Previously SAS 70 Type II)
• PCI Level 1
• FISMA Moderate
• Sarbanes-Oxley (SOX)

HelpSpot Cloud employs Amazon's RDS, a secure database service whose access is limited to local, isolated networks only.

Each HelpSpot Cloud instance has their own isolated database, database user and host-based access privileges.

Databases are stored in the same region as the HelpSpot installation (US or EU) and all failovers and backups take place in that region.

HelpSpot Cloud employs several layers of network protection.

• All HelpSpot Cloud servers are protected by AWS Security Groups, which allows only traffic of specific types through to their servers.
• All HelpSpot Cloud servers additionally employ their own firewalls as an added network security layer.
• When using the provided domain and SSL certificate, Cloudflare is used to help protect against DDoS and various other attacks for you.

HelpSpot Cloud servers are fully backed up.

Amazon RDS provides database availability and durability. RDS is used within multiple availability zones and is backed up with the last 15 days of data.

HelpSpot Cloud servers themselves are backed up with the last 14 days of data. These include file snapshots of the servers, created once per day.

All backups take place and are restricted to their respective regions (US or EU).