Security & Compliance
We take the security of your data seriously. Here's how we protect it.
Last updated: September 2026
Infrastructure & Hosting
Backkr runs on best-in-class infrastructure with industry-standard certifications:
- AWS (ap-southeast-1, Singapore) for infrastructure and database storage
- Vercel for application hosting with global edge distribution
- Neon for managed PostgreSQL database
- All services maintain SOC 2 Type II certification
Encryption
Data in Transit
All data is encrypted using TLS/HTTPS protocols during transmission to and from our servers.
Data at Rest
Sensitive data is encrypted using AES-256 encryption at rest, including:
- Google Analytics and Google Search Console data
- Meta (Facebook) ad data
- All customer account information
Access & Security
Access to Backkr's systems is strictly controlled and monitored:
- Role-based access control ensures team members only access the data they need
- Development and production environments are strictly separated
- Multi-factor authentication (MFA) is enforced on all production access
- All production access is logged and regularly audited
Data Retention & Deletion
We keep your data only as long as needed for legitimate business purposes:
- Google Analytics and Google Search Console data: Retained for 3 years
- Meta (Facebook) ad data: Retained for 2 years
- AI model outputs: Retained for 12 months
- Account data: Permanently deleted within 30 days of account closure
- Backup data: Purged within 90 days after retention period ends
AI & Data Handling
Anonymization Before Processing
Any data sent to AI models is anonymized first to remove personally identifiable information.
Trusted AI Partners
We only work with leading AI providers and all are contractually required not to use customer data for model training or other purposes.
Proprietary Processing
Backkr uses proprietary models alongside third-party AI where it provides better security and performance for your data.
Breach Notification
In the unlikely event of a security breach affecting your data, we will notify you within 72 hours of discovery. We'll also provide clear information about what happened and what steps we're taking.
Monitoring & Insurance
Continuous Monitoring
Application performance and errors are monitored in real-time using Sentry, with automated alerts for any issues.
Cyber Liability Insurance
Backkr maintains cyber liability insurance to protect customers in the unlikely event of a security incident.
Vendor & Sub-Processors
All third-party vendors who access customer data are required to maintain SOC 2 Type II certification or equivalent security standards.
Contact us for our complete list of sub-processors for full transparency on who has access to your data.
Questions about security? Contact us or email hello@backkr.com.