Data protection
Protecting customer data is a core responsibility of Root & Branch Cloud.
Encryption
Section titled “Encryption”- In transit: All public and internal control-plane traffic is encrypted with TLS.
- At rest: Managed databases and persistent volumes use platform-managed encryption.
- In use: Application-level encryption is the responsibility of the customer.
Backups
Section titled “Backups”Managed services are backed up automatically. Backup retention is configurable per service. Customers are responsible for backing up data stored inside their own containers unless a managed service is used.
Data retention
Section titled “Data retention”Data is retained according to the workspace plan and any contractual agreements. When an account is closed, data is deleted in accordance with our data retention policy.
Access to customer data
Section titled “Access to customer data”Root & Branch Cloud staff do not access customer data without explicit authorisation. Any required access is logged and reviewed.
GDPR and data privacy
Section titled “GDPR and data privacy”We process personal data in line with the UK GDPR and EU GDPR. We can provide a Data Processing Agreement (DPA) on request.
Data residency
Section titled “Data residency”You can choose to host your workloads and data in European data centres. Data is stored within the selected region unless you configure cross-region replication.
Customer responsibilities
Section titled “Customer responsibilities”Customers are responsible for:
- Classifying their data appropriately.
- Configuring access controls and secrets.
- Complying with applicable data-protection laws.
- Encrypting sensitive application data before storing it.