Information security

Certified infrastructure

Rakatar runs on leading infrastructure providers certified to international security standards:

• Cloudflare: hosting for Rakatar and customer sites, domains and attack protection. Standards: ISO 27001, SOC 2, PCI DSS.
• Supabase: the database and sign-in. Standard: SOC 2 Type II.
• Resend: automated emails. Standard: SOC 2 Type II.
• SUMIT: card payments. Standard: PCI DSS Level 1.

How we protect your information

• Encryption: all traffic with Rakatar and with customer sites is encrypted (HTTPS).
• Account separation: each customer’s data is separated at the database level, and one customer can never access another customer’s data.
• Load-attack protection: every site is protected by the Cloudflare network.
• Bot protection: site forms are protected against automated submissions.
• Card details: card details are entered directly on the payment provider’s secure page; they never pass through Rakatar and are never stored with us.
• Two-step verification: you can turn on two-step verification for your account.

Backup and restore

The database is backed up automatically every day, and backups are kept for 7 days. After an accidental deletion or a fault, you can ask us to restore your site data as it was up to 7 days back. A restore at a customer’s request is a paid service, as described in the terms of use.

Your part

Part of security is in your hands. The full split of responsibilities is in the terms of use (section 6):

• Keep your sign-in details private, and turn on two-step verification.
• If you connected your own domain, secure your account with the domain registrar.
• Keep medical and other sensitive information out of your site forms.

Reporting a security issue

Found a security issue? Write to us: [email protected]