Where is Arcual data stored and what measures are taken to secure it?
Arcual data is currently stored in two places:
The first place is the application database and application data storage, as with standard web-based software. This data is protected by a number of industry-standard features including:
- Data only being accessible by logged-in users
- Data only being transmitted via HTTPS, the secure web protocol
- Data in the application database being encrypted at rest (meaning that if a copy of the database were obtained, the data could not be read)
These data storage techniques are the standard for “cloud” apps, and rely on not only the security of the application itself (which has been verified via third-party security testing), but also the security of our hosting provider, AWS.
Apart from the application, some additional data is stored on the Arcual blockchain. This data is only the bare minimum of data that needs to be stored to make use of the blockchain, and is also stored securely, specifically:
- The current version of the Arcual blockchain (our test network) is only accessible by Arcual, and not open to third-parties
- No personally identifiable information, price data, or data about the gallery is stored there.
When we are ready to migrate to the next version of the Arcual blockchain we will publish comprehensive information about the security measures and information stored on the blockchain, and how that will evolve over time.