Question 1

How does Elestio encrypt data?

Accepted Answer

All data in transit is encrypted with TLS/SSL. Backups are encrypted at rest. Inter-service communication uses Nebula encrypted overlay networking. SSH access to VMs uses key-based authentication with encrypted connections.

Question 2

What compliance certifications does Elestio hold?

Accepted Answer

Elestio is ISO 27001 certified, SOC 2 compliant, and supports HIPAA and GDPR requirements. Our infrastructure and processes are regularly audited to maintain these certifications.

Question 3

Is Elestio GDPR compliant?

Accepted Answer

Yes, Elestio is fully GDPR compliant. Account data is stored in the EU. You choose where your service data is hosted. We offer a Data Processing Agreement (DPA) and support data portability and deletion requests.

Question 4

How are backups secured?

Accepted Answer

Automated daily backups are encrypted and stored on a separate datacenter on the same continent as your service. Backups are retained for 7 days by default and can be downloaded or restored from the dashboard at any time.

Question 5

What firewall protections are in place?

Accepted Answer

Each service comes with a pre-configured firewall that only opens application-specific ports. You can restrict access to specific IP addresses from the service dashboard. All management ports are secured and non-standard.

Question 6

How is SSH access to VMs controlled?

Accepted Answer

SSH access uses key-based authentication only — password authentication is disabled. Access keys are managed through the Elestio dashboard. You can rotate keys and restrict access at any time.

Question 7

What happens during a security incident?

Accepted Answer

Elestio has an incident response plan that includes immediate isolation of affected services, root cause analysis, customer notification, and remediation. Our 24/7 monitoring detects anomalies and triggers alerts automatically.

Question 8

Where is my data stored?

Accepted Answer

Your application data is hosted in the cloud provider and region you select at deployment. Elestio account data is stored in the EU. Remote backups are stored on the same continent as your service but in a different datacenter for redundancy.

Security & Compliance

Compliance & Privacy

GDPR

SOC 2 Type 2

ISO 27001

HIPAA

Security at every layer

Dedicated Hardware

Backup Strategy

Network Safeguards

End-to-End Encryption

Yearly Security Audits

Automated Updates

Trusted by 10,000+ Developers Worldwide

Questions on compliance, privacy, or security?