Security Standard used by Anvil

[hugetim]

For starters, I believe the hosting is via AWS. The docs indicate: “Anvil’s infrastructure currently lives in London (AWS eu-west-2).” (See also: Anvil Security Policy)

I’m not familiar with the specific security standards you reference, so someone else will be needed to speak to that.

Meanwhile, this past answer may be helpful:

Anvil Cyber Security - Overview

Hi @v.v.avudainayagam - glad you’re enjoying Anvil! First, I want to say that Anvil isn’t a black box! The runtime system used by both the App Server and our hosted service is on GitHub for anyone to audit. We’ve had some customers commission their own private penetration tests – so far, no major vulnerabilities found (although nobody’s code is perfect, and we are always grateful for reports at security@anvil.works). Some fairly large companies including Vodafone, Baker Tilly, and others – inc…