Technical detail

The detail, for whoever checks it.

For you, your IT person or your procurement team: where everything runs, how it’s kept safe, what happens to your data and how changes reach you.

01 / Where it runs

Built on AWS, in London.

Everything runs on Amazon Web Services, in its London data centres. You never need to think about it, but here’s how it’s set up.

  1. 01

    Your own space

    Each client’s products run in a separate account, set up just for them. Your data never sits alongside another client’s.

  2. 02

    Grows when you’re busy

    Your site and its features handle a rush without slowing down, and cost very little when it’s quiet. There are no servers for you to look after.

  3. 03

    Tested before it’s live

    We try every change in a separate test environment before it reaches your site.

  4. 04

    Nothing set up by hand

    Everything we set up is written down and versioned, so we can see what changed and when, and rebuild it if we ever need to.

02 / Security

Safe by how it’s built.

  • No keys lying around

    Our systems sign in with short-lived credentials that expire on their own, so there are no long-lived keys to leak.

  • Only the access it needs

    Each part of what we run can change only its own things. A change to one product can’t touch another.

  • No passwords to steal

    Our client portal signs people in with a passkey (Face ID, Touch ID or a screen lock) or a one-time code sent by email.

  • Locked down in the browser

    Every site and app is served over HTTPS only. Each page tells the browser to run code only from the site itself and never to show the page inside another site.

  • Personal data stays with you

    What your customers send you stays in your account. What comes back to us is counts and statuses: no names, emails or messages.

  • Only what you’ve bought is there

    A feature you haven’t turned on isn’t part of your site at all. Less there means less to attack.

03 / Your data

Backed up, in the UK, and yours.

  1. 01

    Backups you can roll back

    We can restore your data to any moment in the last 35 days, and live data is protected from being deleted by mistake.

  2. 02

    Hosted in the UK

    Your products and the data they hold are hosted in London, and encrypted when stored.

  3. 03

    UK GDPR

    You stay the data controller for your customers’ data. Where we handle personal data for you, we put a data processing agreement in place.

  4. 04

    Yours to take

    The code, the data and the accounts are yours. If you ever move on, we’ll hand everything over cleanly.

04 / How changes reach you

Checked, tried, then released.

  1. 01

    Checked

    Every change passes our automated checks before it’s accepted.

  2. 02

    Tried

    It goes to our test environment first, where we try it for real.

  3. 03

    Released on purpose

    A person starts every release. Nothing goes live on its own.

  4. 04

    Your choice

    Your products stay as they are until you apply an update, and we offer one only when it affects something you use.

05 / Keeping it running

Watched, and quick.

06 / Questions

Got a checklist? Send it over.

If your business has a supplier or security questionnaire, send it to us. We’ll answer it in writing, and an engineer will talk it through with whoever needs to know.

Email
hello@system56.co.uk
Hosting
AWS, London
Replies
Within one working day