Acendae

At Acendae, we take the protection of personal data seriously. On this page, you will find information about how we process personal data, which subprocessors we engage and the technical and organizational security measures we implement.

If you use our hosting, email, domain, or server services, we process personal data on your behalf as the data controller. The arrangements governing this processing are set out in our Data Processing Agreement (DPA).

If you use our services to process personal data on behalf of your own customers, for example, as a web developer, agency, or managed service provider, you act as the data processor and Acendae acts as the subprocessor. In this case, our Subprocessor Agreement applies in addition to the Data Processing Agreement.

For information about the transfer of personal data to third parties that we engage in the provision of our services, please refer to our Subprocessor List.

Organizational Measures

Periodic monitoring, evaluation and assessment of the effectiveness of security measures.
Procedures for compliance with data retention periods and secure data deletion.
Confidentiality obligations for employees.
Information security and privacy awareness and training programs.

Technical Measures

Physical and network security: Secure server facilities, network segmentation, firewalls and system hardening.
Encryption and secure transmission: TLS/STARTTLS encryption for secure data transfer.
Email security: Anti-spam and anti-virus protection, DMARC, DKIM and SPF.
DNS security: DNSSEC implementation.
Logging and monitoring: Access logging, SIEM/IDS monitoring and time synchronization.
Access security: Multi-factor authentication (MFA), least-privilege access controls and jump-host/bastion security.
Backup and business continuity: Segregated backup storage and integrity checks.
Malware and abuse protection: Endpoint protection, malware scanning and quarantine mechanisms.