Data Security

Data storage

Rewind Backups for GitHub (BackHub) is hosted on Amazon Web Services (AWS). AWS is a comprehensive cloud computing platform that features enterprise compute power and data storage along with a broad range of IT solutions and utilities.

Data center accreditation and provisions

Rewind data centers are accredited under ISO 27001, SOC 1 and SOC 2/SSAE 16/ISAE 3402 (Previously SAS 70 Type II), PCI Level 1, FISMA Moderate and Sarbanes-Oxley (SOX).

Rewind’s data centers provide 24/7 manned security, video surveillance, and biometric access control, as well as multi-factor authentication locks.  Here are more details about Amazon Web Services (AWS) security and privacy.

Data center locations

All Rewind data centers are located in Germany and the US. To minimize environmental risks, including flooding, extreme weather, and seismic activity, we select our data center locations according to optimal geographic assessments.

High availability

Rewind services are provided on fully-provisioned, redundant servers in case of failure. Redundant servers may include replica databases, multiple load balancers, and web servers. Rewind takes servers out of operation as part of our regular maintenance without any impact to availability.

Secure backup

Rewind creates regular encrypted backups of our data storage on Amazon Web Services (AWS). Encryption at rest and in transit is provided for all backups. In each 24 hour period, Rewind captures a full backup of customer data.

Production data loss is not a likely event, but should it ever occur, we restore all data from these backups.

We maintain backups for 30 days. After 30 days, the backups and all their data are destroyed in a secure manner.

Comprehensive logs

To prevent unauthorized access, Rewind maintains comprehensive transactional logs of all monitored system actions. Logs are pushed to a dedicated logging instance to prevent manipulations.