> For the complete documentation index, see [llms.txt](https://help.rbsgo.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.rbsgo.com/general/security-and-safety.md).
# SECURITY & SAFETY
This FAQ provides a list of frequently asked questions on the security aspects of the product and the environment in which it is hosted.
## Security and privacy of data?
We take your security and privacy very seriously and as per the privacy policy listed on our website (). In addition to being hosted on a leading data-centre provider - Amazon Web Services (AWS) which includes a plethora of projection such as firewalls and redundancy, all individual client data is stored in their own unique database within our cloud server and this ensures complete privacy of data. The website traffic is secured via SSL which prevents access by third parties since the connection between your browser session and the server are encrypted. All sensitive data stored in the database is encrypted using PCI recommended guidelines for encryption. Further, we provide a multi-tier application/database architecture which means the database is not exposed to the internet.
## What is the uptime?
The cloud solution is hosted on Amazon AWS which provides an uptime SLA of 99.99%. The application uptime is provided at an SLA of 99.5% and is accessible via multiple redundant websites which will be provided to you on sign up. This is the uptime provided with the service however it is important to ensure that the internet connectivity at the property is good and preferably redundant to ensure high availability.
## What about backups?
We utilise the best-in-class server and network systems provided by an industry leader – Amazon Web Services (AWS). This includes multiple levels of data-center class security systems such as firewalls, application protection and redundancy. Your data is exceptionally safeguarded in property independent databases which are automatically backed up multiple times daily. Our expert cloud-support team works 24/7 to ensure that your systems are up and running continually with high uptime. We worry about these important IT matters so you can focus on what you do best – service guests.
## How fast is the application?
WINCLOUD is a cloud solution that is hosted on Amazon AWS utilising the latest acceleration technology such as Amazon CloudFront which is a Content Delivery Network (CDN). A CDN accelerates the website via various methods to ensure that the user interface is cached in multiple edge points across the world. In addition the data is encrypted via a secure tunnel (SSL) between your web browser and the server. This ensures the website is not only fast no matter where in the world you are based but secure as well.
## Is my data accessible by other customers?
One of the key features of WINCLOUD is that each customer has their data stored in an independent database, this means that users from other customers do not have access to your database. Many other vendors utilise a single database for all their customers and while this may at times improve the speed of the application, we chose to go down the path of utilising independent databases thus providing a strict barrier between client data. This also ensures that we are able to do customer specific back-ups and preserve a much higher level of data integrity since your data remains in your own database.
## On-prem vs On-cloud does the security compare?
There is a common misconception that just because the database and application are physically installed at the property it makes the data more secure. What customers often fail to understand is how much effort is required it keeping on-premise systems up to date with operating system, database and applications up to date. Then there is the matter of firewalls, redundancy and backups that require a dedicated IT team for administration.\
\
Winsar the parent company of WINCLOUD have over 1500 installations of the on-premise software WINHMS. The Winsar support team receives a minimum of 2 to 3 cases each month where entire systems are down due to virus / malware / trojans / and ransomware attacks. The downtime caused is considerable and a major impact to business operations.\
\
Cloud-based systems on the hand require none of the above remedial tasks by an IT team at the property as the application and database are on the cloud. The systems utilised for security are state-of-the-art and include multiple levels of protection via firewalls and backups. Your data is protected and secure always for complete peace of mind.
## I need more technical jargon?
For the technically minded we have provided a list of other safety measures which we utilise at application, database and infrastructure level.
* Sensitive data are stored utilising AES 256 bit encryption in line with PCI guidelines
* Incorporation of Code Obfuscation
* Enforce strong password complexity with lockout after failed attempts
* Protection against SQL Injection using various techniques
* Tight session management
* Utilisation of SSL and HTTPS connectivity
* Multi-tiered architecture for both application and database servers thereby isolating database systems from the internet
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://help.rbsgo.com/general/security-and-safety.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.