Security and data protection

Where is Synergist hosted?

Synergist uses Amazon Web Services (AWS), the world's largest hosting provider, to ensure exceptional reliability, performance and security.

Each Synergist Cloud account has their own Synergist software instance hosted on Amazon Web Services (AWS) in either the UK or the EU, and data is processed and stored solely in that location to support GDPR and data privacy requirements.

When you sign up for Synergist, you will be asked whether you want to host your data in the UK or the EU.

How secure is Synergist cloud?

We take security seriously. Synergist is certified to ISO 27001, the global information security management system (ISMS) standard, demonstrating our ongoing commitment to secure data and premises.

In conjunction with our specialist security advisers and AWS, we have created a resilient and secure environment to protect your system and data.

Security controls protect access to and within our environment, including firewalls, intrusion protection systems and network segregation. For more information, see AWS security

Each Synergist customer has a separate Synergist instance on AWS. These individual Synergist instances are not directly exposed to the Internet, and all access is via high-availability reverse proxy.

Safeguards against threats such as SQL injection are built into the software. In addition, we work closely with CREST-approved penetration testers to independently validate the effectiveness of our security measures. Our regular data security audits and monitoring systems ensure we continue to identify and mitigate emerging threats.

Does Synergist comply with GDPR?

Synergist has implemented data protection into our systems and processes and maintains compliance with all UK data protection regulations, including the General Data Protection Regulation (GDPR). See how using Synergist helps ensure compliance

We use AWS with servers in the UK or EU to host your software and data. See more information about AWS's approach to compliance with the GDPR

What security measures do you have in place to protect data?

We provide multiple layers of protection for the data you trust to Synergist, including encryption when it's being transferred and stored.

Each Synergist customer has their own Synergist software instance on AWS. This means fundamental isolation of each customer's data within their own virtual operating system. This has numerous security benefits, such as the timing of Software version upgrades can be specific to each customer, and there is no risk of customer data being exposed to other Synergist customers.

Each Synergist Cloud customer is allocated their own sub-domain, and all communications use the latest SSL encryption technology - A+ rating from SSL labs.

User access management, including password complexity, expiration, and reset policies, provides additional security at sign-in. All passwords are encrypted in the database. User/team roles and permissions let you control what users can see and do in Synergist.

Synergist’s multi-factor authentication (MFA) provides an optional second layer of validation that can be enabled by user or system-wide.

Synergist also supports single sign-on to eliminate the need for users to remember a Synergist username and password and simplify user administration. 

How is my data backed up?

To minimise any risks of data loss, we perform multiple backup processes. We replicate your database by creating a consistent copy each night. We also record each database transaction since the last consistent copy was created in a database journal file. This allows for the potential to replay transactions into the database “up to the minute” in the unlikely event of needing to recover the database from a consistent copy.

We also configure AWS to take an EBS Snapshot each day to back up your entire Synergist instance. These snapshots are stored in a separate location within the AWS hosting environment.

Any files you attach to jobs or clients within your Synergist system are stored using the Amazon S3 (Simple Storage System) service, which automatically replicates documents over several storage systems based in multiple locations.

We regularly test our data recovery procedures to ensure that, in the unlikely event of a problem, we can restore your data quickly.

See the Synergist cloud hosting service backup policy

What about availability?

Enterprise-level cloud hosting means it's faster and more reliable than most on-premises systems.

Multiple redundancy technologies for our hardware, networks and infrastructure help keep Synergist running if any component fails.

All our servers and data centres have robust physical security controls and 24/7 monitoring and surveillance.

Synergist use reasonable endeavours to ensure that services are available not less than 99.5% of the time, so there's no disruption to your business. We publish live Synergist Cloud uptime info

Will I need IT involved?

No. We take care of all your server maintenance, back-ups and updates. So, you don't need to have any staff members trained in server administration and maintenance.

Plus, because it's not hosted on your premises, you remove your risk of data loss due to hardware failures while saving on both electricity costs and carbon emissions.

Do you manage updates?

Yes. We manage updates for you, so you'll always be on the most appropriate Synergist version.

Each Synergist customer has their own Synergist software instance, so upgrades can be timed for each customer appropriately.

Have questions?

If you have questions about Synergist Cloud hosting or security, just drop us an email