Security has been an integral part of AppCraft's DNA since 2016. Our SaaS platform, 100% hosted in France, is ISO 27001 certified. ISO 27001since 2021. This is the most demanding international standard for information security management.
Every year, we gain expertise and maturity to serve you better.
We implement annual audits, full data encryption, and redundant cloud architecture to ensure the protection, availability, and integrity of your event information.
All data processed by AppCraft is hosted in France, in Gravelines, in OVHcloud-certified data centers (ISO 27001, PCI-DSS, SOC 1 & 2 Type II). This approach guarantees complete digital sovereignty, strict compliance with the GDPR, and total transparency for our customers.
Our infrastructure is based on a multi-zone architecture (Gravelines & Roubaix) with integrated load balancer and CDN.
Requests are automatically distributed across four application servers to ensure high availability (99% SLA).
OVHcloud's anti-DDoS protection, UFW firewalls, and Bitdefender antivirus software guarantee service continuity even in the event of an attack.
All exchanges on the platform are encrypted via HTTPS and TLS 1.2.
Databases and files are encrypted at rest (AES-256), with automatic key rotation and daily backups over a rolling 15-day period.
Each sensitive file has a unique key, ensuring absolute confidentiality.
AppCraft has its platform audited at least once a year by specialized companies such as Synacktiv and Orange Cyberdefense.
We also allow our customers to perform their own penetration tests to verify the robustness of our system.
Thanks to a Business Continuity and Disaster Recovery Plan (BCP/DRP) that is tested annually, AppCraft guarantees the availability of its services in all circumstances.
In the event of an incident, our teams respond within 30 minutes and ensure recovery within a maximum of 4 hours during ongoing events.
Backups and restores are automated, ensuring a maximum data loss of 24 hours.
For your security, AppCraft imposes requirements on your users and guests in terms of password format (length, special characters, etc.). They are then encrypted on our servers, making them unreadable, even by the AppCraft team.
For your administrators, we strongly recommend using SSO (Single Sign On) in your organization.
If you use SSO, we can implement it within 48 hours so that your employees can use this method to access their AppCraft accounts.
