Security & Infrastructure Overview
At Crayon Digital, the security and privacy of your data, and your customers' data, is paramount. Every website, CRM and platform we host for you is built on enterprise-grade infrastructure with safeguards at every level. This page explains where your data lives, how it is protected, and the standards we hold ourselves to.
Where your data is hosted
Everything we host for you sits on enterprise-grade infrastructure, with an appropriate safeguard for each platform's location.
Websites & application hosting
Your website, its database and any application we build on it (such as membership areas, booking systems or learning platforms) are hosted with SiteGround on Google Cloud infrastructure within the UK/EU. Your data stays in your own dedicated environment.
Hosted within the UK / EUCRM & subscription platform
Your CRM, marketing automations and subscription billing run on LeadConnector LLC, hosted on Google Cloud Platform and AWS. LeadConnector LLC is certified under the EU-US Data Privacy Framework and the UK Extension to it, supported by Standard Contractual Clauses, a recognised safeguard for UK and EU data processed in the US.
Hosted in the United States, with UK/EU transfer safeguardsHow your data is protected
The same standards apply across every platform we manage for you.
Encryption
All data is encrypted in transit with industry-standard TLS, and at rest with AES-256, one of the strongest standards available, protecting your data both as it travels and where it is stored.
Redundancy & backups
Our platforms are built for high availability across multiple availability zones to minimise downtime. Data is backed up automatically every day, with multiple restore points retained and monitored, so it can be recovered quickly if needed.
Physical security
We hold no systems or customer data in our own offices. Physical security of the data centres is handled by our cloud partners (Google, AWS and SiteGround), which meet the highest industry standards.
Your data stays yours
We are a custodian of your data, never an owner of it.
You own it
You own your data and all the content within it. We never claim ownership of it and we never sell it.
Access & portability
You can request a full export of your data at any time. If you ever move on, we return everything in a standard format and remove our copies.
Responsible use
We process your data only to deliver your services, on your instructions, and share it only where needed to run those services or where required by law.