Where does MoveData store its data?

MoveData is based on Amazon Web Services and stores data in Sydney, Australia.

Does MoveData have any contracts that result in personal data being hosted in any other country?

MoveData uses Amazon Web Services for its core infrastructure. There are limited scenarios where AWS may move some data out of Australia as a result of failures such as routing or backup. You can read more about AWS's commitments to data sovereignty here. You can View our sub-processors at https://www.movedata.io/legal/subprocessors/.

What sub-processors does MoveData use?

You can view our sub-processors at https://www.movedata.io/legal/subprocessors/.

What steps do MoveData have in place to ensure the availability of services?

MoveData implements a multi-data centre active configuration and frequently fails the service primaries across data centres to ensure automated failure cutovers are operable.

What agreements do MoveData have to ensure continuity of service?

MoveData inherits a suite of SLAs from Amazon Web Services. You can read more about this at https://docs.aws.amazon.com/wellarchitected/latest/reliability-pillar/welcome.html.

Are customers multi tenanted on MoveData or do they have separate instances?

MoveData operates a multi-tenanted environment and all customers run on the same infrastructure.

Is data encrypted at rest?

Data is encrypted at rest using hardware-managed certificates. More information can be found in our Cloud Security Alliance Assessment.

How is data transferred and how is it protected while in transit?

All communications undertaken on the MoveData network are performed using HTTPS. Amazon Web Services provides a suite of controls around this and you can read more at https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/data-protection.html#encryption-transit.

When are your systems patched?

MoveData code is scanned nightly and on all system deployments for vulnerabilities. The majority of MoveData services run on Lambda; you can read more about Lambda and patching at https://docs.aws.amazon.com/whitepapers/latest/security-overview-aws-lambda/runtime-maintenance-in-lambda.html.

Has anyone conducted a security assessment on your systems?

MoveData works with the Salesforce Security Review team to complete periodic penetration testing and audits. To date, MoveData has not had any issues identified.

If a customer wishes to leave MoveData, what technical and commercial provisions are there to export the data to another system?

Given MoveData's middle-wear role there is typically no need to export data to another system. While customer data is deleted on a 90 day rolling basis, customers can submit service requests for their data to be deleted before this date.

How does MoveData send data to Salesforce?

Using an OAuth token, MoveData sends data via an HTTPS connection to Salesforce. In addition, MoveData employs additional handshakes and checks to ensure data can only be transmitted between the MoveData platform and MoveData Salesforce application.

How does Salesforce request data and interface with MoveData?

This is performed using a HTTPS connection using a number of authentication handshakes and proprietary checks.

Does MoveData hold sensitive Salesforce-specific data in logs?

Execution Logs can be viewed within the MoveData application. Via your MoveData Settings you can determine if Salesforce-specific data is to be written to these logs.

Does MoveData make use of algorithms or AI to perform individual decision making?

No - MoveData does not delegate traditional human decision making to technology.

Does MoveData make use of algorithms or AI to perform profiling?

No - MoveData does not profile the data transported through its systems.

What support arrangements exist for MoveData?

MoveData offers in-application support, an online knowledge base and service request ticketed support.