Table of contents
...
| Variant | Residency (all envs) | Company control over location | |||
|---|---|---|---|---|---|
| On Premise | The customer company | Yes | Swisscom Application Cloud | Switzerland | 50:50. Within Swiss boundaries guaranteed by Swisscom Schweiz AG |
| Microsoft Azure | By Choice, but EU | No | |||
| OpsOne | Switzerland | No! Within Swiss boundaries guaranteed by OpsOne AG |
...
On premise yes, in Swisscom Application Cloud too. OpsOne, Yes. Azure subject to research.
...
The infrastructure we currently use is protected by Swisscom OpsOne (but also depends on your hosting type). As written on top, when hosting the application yourself On Premise you are responsible for a great part of security yourself.
...
Transit: HTTPS is used for transit and only hashed passwords are transmitted. Authenticated users are identified by a HTTP-Only-Cookie.
Rest: In our case Swisscom OpsOne encrypts the data and keeps it safe. On premise: the data safety cannot be guaranteed by Gravity Global AG or its cloud providers.
...
Depends on hosting choice. On Premise you are responsible for your servers. Swisscom Application Cloud Different cloud providers offers SLA’s for partners and customers which we would acquire on the customers behalf (paid by the customer). Microsoft Azure has different subscriptions which can be chosen from. Since GRAVITY is not business critical and does not interfere with daily business, cheaper plans are advised.
...
Yes. When we build our software we scan the built containers with Harbour. The containers are scanned with the Library Trivy.