Security Standard used by Anvil

[bertrand.andromediat]

Hello,

I would like to know the security standards used by Anvil and your hosting service. i.e. ISO, SOC, etc.

I ask this question because most of our customers are reluctant to use cloud applications. However, providing them with the security standards applied by our providers reassures them most of the time.

Thanks

[hugetim]

For starters, I believe the hosting is via AWS. The docs indicate: “Anvil’s infrastructure currently lives in London (AWS eu-west-2).” (See also: Anvil Security Policy)

I’m not familiar with the specific security standards you reference, so someone else will be needed to speak to that.

Meanwhile, this past answer may be helpful:

Anvil Cyber Security - Overview

Hi @v.v.avudainayagam - glad you’re enjoying Anvil! First, I want to say that Anvil isn’t a black box! The runtime system used by both the App Server and our hosted service is on GitHub for anyone to audit. We’ve had some customers commission their own private penetration tests – so far, no major vulnerabilities found (although nobody’s code is perfect, and we are always grateful for reports at security@anvil.works). Some fairly large companies including Vodafone, Baker Tilly, and others – inc…

[bertrand.andromediat]

Hi,

Thank you very much for the information. Knowing that the infrastructure is installed on AWS, I will be able to find the information regarding the standards on Amazon’s website.

Have a nice day