The platform is hosted on a managed private server based in the United Kingdom, providing dedicated resources and isolation from other hosted services.

Hosting
Provider: Big Wet Fish Hosting
Server type: Managed private server
Data location: United Kingdom

Edge Network & Traffic Management
Provider: Cloudflare
Purpose: TLS termination, traffic filtering, content delivery, and DDoS protection
Data processed: IP addresses and request metadata only — no personal data stored

Tenant Isolation
The platform operates in an isolated environment using Docker containerisation, ensuring separation from other services on the shared infrastructure.

Encryption
Data in transit is encrypted using TLS 1.2/1.3 with AES-GCM cipher suites and forward secrecy via ECDHE key exchange, managed through Cloudflare’s edge network. Login credentials are protected using AES encryption.

Data at rest is not encrypted at the server level. Stored data is protected through the access controls, network security, and tenant isolation measures described on this page and on the Platform Security Principles page. The platform holds no special category data, operates as a closed system accessible only to registered users, and is hosted entirely within the United Kingdom.

Server Security
Server-level security is managed by the hosting provider and includes:

• Software firewall
• Malware scanning with automatic removal of known malware
• Bot blocking
• Vulnerability scanning
• Mod Security enterprise ruleset
• SSH access restricted to authorised IP addresses only

Software Updates
Operating system and platform software updates and patches are applied automatically to maintain security and stability.

---

Legal responsibility for the content on this page sits with 3manfactory Ltd.