This article provides an overview of the security measures ProBackup has in place to protect your data. For full details, visit our Security page.
Infrastructure security
All user data is stored exclusively in AWS data centres in Dublin, Ireland, certified to industry standards including ISO 27001, SOC 1 & 2, and PCI Level 1. These facilities are protected by 24/7 CCTV, intrusion detection, access logging, redundant power, and fire suppression systems.
ProBackup enforces strict access controls with multi-factor authentication for all production environments. Privileged access is limited to authorised personnel and promptly revoked when no longer required. Continuous monitoring covers intrusion detection, performance metrics, log management, and vulnerability assessments.
Product security
ProBackup protects your data at every stage:
At rest – all data is encrypted using AES-256, with keys managed by AWS Key Management Service.
In transit – all connections are secured via SSL (port 443) and enforced through HTTP Strict Transport Security (HSTS).
Annual penetration tests and control self-assessments are conducted, with vulnerabilities remediated promptly. Quarterly vulnerability scans identify risks, and critical issues are prioritised for immediate resolution.
Organisational security
All staff and contractors undergo background checks, sign confidentiality agreements, and complete security awareness training at onboarding and annually thereafter. Mobile devices are centrally managed via Mobile Device Management (MDM), and strict asset disposal policies are in place.
Internal processes
ProBackup maintains comprehensive Business Continuity and Disaster Recovery plans, holds cybersecurity insurance, and follows a formal Systems Development Life Cycle (SDLC) for all system changes.
Access controls are reviewed regularly with documented approvals. Security policies are reviewed annually, and incident response procedures are in place for swift resolution of any security or privacy events.
Data and privacy
ProBackup securely stores customer data and permanently deletes it upon service termination. Access to sensitive information is restricted to authorised personnel only.
ProBackup acts as a data processor when handling personal data on behalf of customers and as a data controller for data about its own customers. Both roles comply with GDPR and are formalised through our Data Processing Addendum (DPA).
You can download our DPA and other compliance documents from our Audit Reports page. For full details on how we handle your data, see our Privacy Policy.