LinkStacked takes data security seriously. Here's a transparent overview of how your data is stored, encrypted, and protected.
Infrastructure
All data is hosted on AWS (Amazon Web Services) in the US-East-1 region, with a EU-West-1 replica for European users. We use AWS RDS (PostgreSQL) for structured data and AWS S3 for file storage (profile photos, digital products).
Encryption
- All data in transit is encrypted with TLS 1.3.
- All data at rest is encrypted with AES-256.
- Passwords are hashed with bcrypt (cost factor 12) — never stored in plaintext.
- API keys and webhook secrets are hashed before storage.
Access control
Production database access is restricted to our engineering team via VPN and requires MFA. All access is logged and audited. No customer support staff can access your password or payment information.
Backups
Database backups run every 6 hours with 30-day retention. S3 objects use versioning. In the event of a catastrophic failure, we can restore to within 6 hours of the incident.
We undergo annual SOC 2 Type II audits. A summary report is available to Enterprise customers on request.
Was this article helpful?