Trust Center

Scope of this Trust Center

This page gives a public overview of the measures and working practices SiteServer uses to support trust, privacy, and continuity.

The Trust Center does not replace a quotation, agreement, data processing arrangement, privacy statement, general terms, or service arrangement. Concrete guarantees, response times, retention periods, and backup arrangements apply only when recorded in writing.

Because services, risks, and law change, this page is updated when measures or processes materially change.

Account and access security

The customer portal uses account protections such as email verification, password validation, session security, secure cookies, and protection against form abuse.

Staff access to management screens is limited to authorised users and requires additional authentication. Sensitive actions, such as provisioning, domain, invoice, support, and privacy processes, are logged for review and follow-up.

SiteServer may restrict access, ask for additional verification, or take measures when misuse, credential leakage, malware, spam, vulnerabilities, or unusual activity is suspected.

Protection of customer data

SiteServer processes only the data needed for contact, quotations, customer accounts, hosting, domains, billing, payments, support, security, and statutory administration.

Personal data is not sold. Data is shared only with necessary service providers or competent authorities when needed for service delivery, security, administration, or legal obligations.

Where the customer portal processes sensitive provisioning data, one-time access information, or transfer codes, appropriate technical measures are used, such as encryption, restricted access, and ownership checks.

Hosting, continuity, and backups

SiteServer configures hosting environments with attention to stability, monitoring, secure configuration, maintenance, and recoverability.

Backups, retention, recovery expectations, and support arrangements depend on the selected service, technical setup, and written agreements. No hosting environment can be guaranteed to be fully free of outages, security risks, or external dependencies.

For migrations, DNS changes, and technical deliveries, SiteServer checks reachability, SSL, redirects, and key hosting functions where appropriate.

Monitoring, logging, and change management

SiteServer uses monitoring, technical logs, and audit data to assess availability, errors, misuse signals, and important account or service events.

Changes to the website and customer portal run through reproducible builds, checks, and release processes. For production processes, health checks, migration checks, and rollback options are used where appropriate.

Logs and audit data are used for security, error analysis, evidence, support, and statutory administration. The privacy statement explains how technical data is processed.

Vulnerability reporting

If you believe you have found a security issue, email security [at] siteserver.nl with a short explanation, affected URL or service, reproducible steps, possible impact, and a contact address.

Avoid harm during research: do not open or change other people's data, do not run disruptive tests, do not use social engineering, and do not publish details until SiteServer has had a reasonable opportunity to assess the issue.

SiteServer reviews reports carefully and may ask for additional information. A report does not grant access to systems, data, or accounts beyond what is needed to describe the issue responsibly.

Shared responsibility

Secure hosting is a shared responsibility. Customers remain responsible for accurate contact details, safe use of their own accounts, strong passwords, careful management of CMS accounts, plug-ins, licences, content, and data they place themselves.

Customers should report misuse, suspicious activity, data breaches, lost access methods, and relevant changes in domain, DNS, billing, or contact details on time.

SiteServer can advise on updates, hardening, migrations, DNS, SSL, backups, and recovery, but the exact division of responsibilities follows from the selected service and written agreements.

Documentation and agreements

This page gives a public overview of how SiteServer handles security, privacy, and continuity.

Customer-specific agreements about availability, support, backups, recovery, data processing arrangements, retention periods, and responsibilities are recorded in the quotation, agreement, or additional arrangements.

When additional security or privacy documentation is needed for a customer relationship, SiteServer shares it through the appropriate contractual or support route.

Changes

SiteServer may update this Trust Center when services, security measures, processes, or law change. The date above shows when this page was last updated.