Isolation
Each server runs in its own container with its own configuration and users. Users are locked into their home folders, and each server’s files sit under a separate storage prefix.
Credentials
- Passwords are generated for you, shown once, and stored only as salted hashes on the server.
- SSH keys are stored as public keys only.
- Repeated failed logins from the same client are blocked automatically.
Data
Files are stored in S3-compatible object storage in the server’s region, encrypted at rest. SFTP and FTPS encrypt data in transit. Plain FTP does not, so keep it disabled unless you need it.
Hosting
Servers and storage run in EU data centers in Germany and Finland. Webhook deliveries come from our control plane and are signed so you can verify them.