Security of our Cloud solution
In order to guarantee the security of the data hosted on our cloud servers, numerous measures have been taken:
- Our cloud servers all run on Windows Server 2019 or 2022 and are protected by a distinct, complex password.
- Microsoft security patches are installed every month.
- Apart from one monitoring application, only our 4D-based applications are in service on the servers, which reduces their attack surface.
- The 4D Server application is a database little known to hackers. We have never been aware of any intrusion into 4D Server, either on our own cloud servers, or on the premises of customers who host the server themselves.
- All data in transit between the server and client workstations is encrypted.
- The program logs each connection to the database. The connection log can be consulted by the administrator if an intrusion is suspected.
- All data and backups are stored in ultra-secure data centers in Switzerland.
- A data backup is performed every night if the data has been modified during the previous day.
- We keep the last 7 daily backups and the last monthly backup for one year.
- Full backups on a separate, remote server are also kept for 6 months.
Even if total security can never be guaranteed in IT, we believe we offer a very good level of security.
The main risk probably lies in the complexity and confidentiality of the passwords defined by our customers in the configuration of user accounts for our programs. Our cloud versions require passwords of at least 6 characters made up of letters and numbers, but it is the responsibility of our customers to ensure that these passwords are not too simple (e.g. abc123) and that they are not divulged to others. Regular password changes are recommended.