Platform Security

What is Bamboozle's commitment to my data?

We want to make the Internet a safer place for everyone to live, work, and prosper. We believe in holding ourselves accountable to maintaining the trust of our customers and only collecting the data necessary to serve our customers.

What data do you collect about me?

We collect self-reported data, which is data you voluntarily provide so we can provide our service. Self-reported data includes account data such as email address, provided name, and billing information. This also includes customer-provided user preferences and the information in support tickets.

We also receive data from third parties about you and collect data when you interact with our service. Depending on how you use our products and services, interaction data may include things like internet protocol (IP) addresses, browser type, internet service provider (ISP), referring and exit pages, operating system, date and time stamp, clickstream data, landing page, and referring URL.

More information about data we collect can be found in our Privacy Policy.

How does Bamboozle protect my payment card information?

If you use a credit or debit card as your payment method, we process your payments through a third party payment processor, which stores and maintains your complete payment information on our behalf. We do not store your complete payment card number ourselves.

How do you use the data you collect?

We use the data we collect to provide you with the best experience possible. We use data to improve our product and market new products we think you will enjoy. We believe that all data use should provide you with value and we are committed every day to balancing our data collection practices with your privacy in mind.

What access does Bamboozle have to the data I store?

Employees do not have access to the content of your virtual or dedicated servers unless you give us permission for support, we are required to access them as part of an active abuse or fraud investigation, or where access is necessary to comply with a valid legal process.

How does Bamboozle help me secure my infrastructure network?

We suggest these resources to help protect your server:

• Add SSH keys when you create new virtual or dedicated servers.
• Add a firewall to your servers.
• Have multiple VMs that only need to talk to each other? Use our Virtual Private Networks.

How does Bamboozle share the responsibility of securing my data?

For our Infrastructure as a Service products, we secure the system and the network your service runs on, inclusive of the management control plane.

For our PaaS products, we extend our responsibility for security of those platforms further up-stack. Secure configurations, access, and patching are all part of the as-a-Service model for these products.

What is my responsibility when it comes to securing my infrastructure?

The data you store is always yours to own and secure. We provide guidance and a handful of technologies on our platform for you to secure your instances.

How does Bamboozle secure the management backend network and virtualization environment?

Tight role-based access, two-factor authentication, secure network zones and secrets management underpin our approach to securing our management layer. Vulnerability and patch management as well as security observability tools help us keep on top of the ever-shifting risk in our infrastructure. We are also currently on the path toward a broader zero-trust model for access to resources within our environment.

How do I responsibly share a vulnerability?

We strive to create a safe, resilient environment where our customers and community can innovate with confidence. If you have discovered a vulnerability, please report it. We partner with HackerOne to run a public vulnerability disclosure program. Please share the full details of the issue with us and make a good faith effort to avoid violating our customers privacy, destroying data, or interrupting our services.

How does Bamboozle secure the data centers?

Bamboozle is committed to working with third-party data center providers that maintain industry-leading access control, including video surveillance, security, access lists, and exit procedures. We regularly audit our data centers to meet our regulatory requirements and validate proper implementation of our security requirements.