Dedicated servers
We run multiple dedicated servers rather than shared hosting, so your system isn’t sharing a server with unrelated websites.
secure hosting
How we keep your system and data secure
Digitav hosts the systems we build on our own dedicated servers, with backups every hour, day, week and month, external vulnerability scanning and server security set up to the technical requirements of PCI DSS.
The short answer
Your system runs on dedicated servers in an ISO 27001 compliant environment. It is backed up every hour, scanned for vulnerabilities from outside, and hosted on servers secured to the technical requirements of PCI DSS. Hosting and maintenance, including security updates, are included in your monthly licence.
Hosting
Infrastructure built for business systems
The systems we build hold customer records, payments and operational data, so they are hosted accordingly.
ISO 27001 compliant environment
Our dedicated servers are hosted in an environment that meets the ISO 27001 information security standard.
Secured to PCI DSS requirements
Server security is set up to the technical requirements of PCI DSS, the standard used to protect payment card data.
External vulnerability scanning
Our servers are scanned from outside for known vulnerabilities so issues can be found and fixed.
Backups
Backups every hour, day, week and month
Hourly backups mean a system can be restored to a point earlier the same day if something goes wrong. Daily, weekly and monthly copies give you older restore points too.
| Backup | What it gives you |
|---|---|
| Hourly | A recent restore point during the working day |
| Daily | A copy of each day’s information |
| Weekly | Restore points going back over recent weeks |
| Monthly | Longer-term copies for recovering older information |
Application security
Security built into the software
Hosting is one part of security. The way each system is designed matters just as much.
Encrypted connections
Systems are accessed over HTTPS, so information is encrypted between the browser and the server.
Role-based permissions
Each person sees and changes only what their role allows.
Audit trails
A clear record of who changed what and when.
Security updates
Maintenance, including security updates, is part of your monthly licence.
Supported authentication, scoped permissions and secure storage of integration credentials.
Payments use providers such as Stripe, whose secure components mean raw card details aren’t stored in your application.
PCI DSS
A clear statement on card security
Digitav is not a PCI DSS certified service provider. Our servers meet the standard’s technical security requirements, including external vulnerability scanning.
Where a system takes card payments, we integrate specialist providers such as Stripe. Card details are processed on their certified platforms, so your system doesn’t need to store card numbers.
Frequently asked questions
Questions about security and hosting
Where is our system hosted?
On Digitav’s own dedicated servers, hosted in an ISO 27001 compliant environment. We can provide hosting details for your supplier or due-diligence checks.
Is Digitav PCI DSS compliant?
No. Digitav is not a PCI DSS certified service provider. Our servers are secured to meet the standard’s technical requirements, including external vulnerability scanning. Where a system takes card payments, we use providers such as Stripe so card details are handled on their certified platforms rather than stored in your system.
How often is our data backed up?
Backups run every hour, every day, every week and every month, so a system can be restored to a recent point or to an earlier one if needed.
Who can access our system and data?
Only the people you authorise, with permissions set by role. Access to administration areas is limited to authorised Digitav staff who host, maintain and support the system.
Are hosting and security updates included?
Yes. Hosting and maintenance, including security updates, are included in the monthly licence.
Can you help with our security questionnaire?
Yes. We can answer supplier and due-diligence questionnaires about hosting, backups, access control and vulnerability scanning.
Talk to us about a secure system for your business
Tell us what the system needs to do and any security requirements your organisation has.