Our server infrastructure is hosted on Amazon Web Services. The AWS compliance program is designed to follow international security standards and regulations, while protecting confidentiality and data privacy. Data centers provide the necessary means to operate 24/7 and protect data from physical damage and network issues.  
​
All Your data is backed up daily and stored in a failover cluster. Your sitemaps are also recoverable (up to 30-days) even after you delete them.
​
​Data encryption
​When you access VisualSitemaps, SSL technology protects your information using both server authentication and data encryption in transit. We use TLS with up to 256 AES encryption as supported by the client. Data at rest is protected by using FIPS140-2 standards compliant encryption. Backups are encrypted with AES-256. Passwords are never stored as clear text. They are always hashed and salted securely.
​
​Privacy
All communication between our components, including connections to the database, the message queue and other internal services happens only within our private network. Communication with all 3rd party systems/APIs is performed over a secure connection. User passwords, access tokens and any other stored information are also highly encrypted.
​
​Passwords
​All passwords are filtered from our logs and are one-way encrypted in the database using the bcrypt (salted) hash function. Login information is always sent over SSL.
​
We cannot view any of your credentials, so much so that if you lose your password, it must go through the reset procedure for your account to be accessible again.
​
​Third-Party Service User Credentials
​We store the configuration details for your connections (integration) to the various third-party services. The service passwords, OAuth tokens and third-party API keys are encrypted with a salt and stored in our database. You can completely revoke VisualSitemap's access to a service at any given time.