About this page
How HostUp India protects the infrastructure your services run on, and what you are responsible for.
Data centers
Our servers run in two data centers in India, Mumbai (MUM-01) and Delhi NCR (DEL-01). Both are Tier III, with N+1 power.
Network protection
- Always-on DDoS mitigation at L3/L4/L7, with scrubbing at the network edge.
- Private networking: VPC on KVM VPS, and custom VLANs for private clouds.
Isolation and hardware
- KVM virtualization: every VPS runs its own kernel, isolated from other customers.
- VDS plans give you dedicated, pinned CPU cores.
- Dedicated servers are single-tenant, with IPMI access included.
- Servers use registered ECC memory and NVMe storage.
Our security minimums
- TLS 1.2 or later for the control panel, the client area and all admin access.
- Backup archives stored on our platform are encrypted at rest.
- Firewalls, intrusion detection and volumetric DDoS mitigation at the network edge.
- Multi-factor authentication available to customers, and required for our staff with admin access.
- Staff get only the access they need; it is logged and reviewed every quarter.
- Hypervisors, hosts and control panels we manage are patched within 30 days of a vendor release, or within 7 days for critical vulnerabilities.
- Every customer’s environment is kept separate from every other.
Protecting your data
- Every hosting plan includes a free SSL certificate, so traffic to your site is encrypted.
- We protect personal information with encryption, firewalls and regular security assessments.
- Your data is stored in our data centers in India unless you choose another region when ordering.
- Hosting plans include backups as described on each plan and in our Service Level Agreement, and KVM VPS can add daily snapshots.
- If we confirm a security incident that affects your data, we tell you within 72 hours and keep you updated as we investigate.
Your part
- Keep your own backups of all your content. We do not promise to back up any account or content.
- On unmanaged services, such as a VPS, you look after the operating system and software you install: updates, passwords, firewall rules and access.
- Keep your account details private, and tell us straight away if you think your account has been accessed by someone else.
Reporting a security issue
If you find a security problem in our services, or see abuse coming from our network, email [email protected] with the details and any logs or evidence.