CLOUD SECURITY STATEMENT

Xpand IT cloud services (Xpand IT Cloud) are hosted and delivered by Amazon Web Services (AWS), Microsoft Azure and Digital Ocean (Claud Providers). The Cloud Providers are responsible for the security of their actual data centers. Xpand IT is responsible for monitoring, managing and securing the Xpand IT Cloud.

The Cloud Providers are responsible for the data centers that host the Xpand IT Cloud. For more information about security at those data centers, see:

• AWS: https://aws.amazon.com/security
• Azure: https://docs.microsoft.com/en-us/azure/security/azure-security-getting-started
• Digital Ocean: https://www.digitalocean.com/security/

Xpand IT Cloud is hosted in the United States (AWS) and Amsterdam (Azure and Digital Ocean).

The Cloud Providers are responsible for managing the security of the cloud. They have been certified by third-party organizations, and manage many compliance programs to comply with the applicable laws and regulations. A list of such certifications and compliance statements can be found at:

• AWS: https://aws.amazon.com/compliance/
• Azure: https://www.microsoft.com/en-us/trustcenter/compliance/default.aspx
• Digital Ocean: https://www.digitalocean.com/security/compliance/

Xpand IT is a Cloud Security Compliant vendor of the following vendors:

Atlassian – https://developer.atlassian.com/market/programs-and-features/cloud-security-program

In the Xpand IT Cloud, the data at rest are encrypted using industry standard encryption. Additionally, all communications with the Xpand IT Cloud are protected with HTTPS using TLS.

Within Xpand IT, only a few members of our Xpand IT Team have access to the production environment for the purposes of maintaining our cloud services and assisting our customers. Additionally, we motorize  all accesses to Xpand IT Cloud.

Customers are responsible for the security of their own login information.

Customer data are backed up once per day, and are encrypted.

Xpand IT understands the importance and is committed to ensure the privacy of your personally identifiable information. For more information, please see our Privacy Policy.