Trust Center
What we can show you today, and what comes next
We only publish what we can stand behind. Topics marked “Before launch” will be documented once the infrastructure, policies and legal review behind them are final.
Security
Baseline protections included with Hosttiva plans.
- SSL certificates on every hosting plan.
- Malware monitoring on Professional web hosting and malware checks on WP Care.
- Firewall configuration on managed application and VPS plans.
- Game servers run on infrastructure separate from web hosting.
- Isolated environments for shared, application and game workloads.
Backups
Backup frequency is listed on every plan so you know what is covered.
- Weekly backups on Launch and WP Starter; daily backups on Business and WP Business.
- Advanced backups on Scale and Game 8GB; scheduled backups on Game 4GB.
- Backups and a recovery plan on managed application plans.
- Retention periods and restore terms will be set out in the Backup Policy.
Responsible disclosure
Found a vulnerability? Tell us privately and we will work with you on a fix.
- Email security@hosttiva.com with steps to reproduce and the affected URL or service.
- Please do not access customer data, run denial-of-service tests or publicly disclose before we have responded.
- Our machine-readable contact is published at /.well-known/security.txt.
Email compliance
Email marketing on Hosttiva must be permission-based.
- Customers must have permission to contact subscribers.
- Every campaign must include an unsubscribe option.
- Sender information must be accurate.
- Applicable anti-spam and privacy requirements apply.
Before launch
These pages are in preparation. Each will list specifics rather than general assurances.
- Privacy and data protectionBefore launch
How we collect, process and protect personal data.
- · Privacy Policy and Cookie Policy
- · Data Processing Addendum
- · Data retention and deletion
- ComplianceBefore launch
Legal and regulatory commitments, reviewed by a qualified legal professional.
- · Terms of Service and Acceptable Use Policy
- · Domain Registration Agreement
- · Third-party licence verification
- InfrastructureBefore launch
Where your services run and what they run on.
- · Server locations and data centres
- · Network partners
- · CPU platforms and storage
- EncryptionBefore launch
How data is protected in transit and at rest.
- · TLS versions and configuration
- · Encryption at rest
- · Key management
- DDoS protectionBefore launch
Network-level protection against traffic floods.
- · Which services are covered
- · Mitigation approach
- · Customer responsibilities
- MonitoringBefore launch
How we watch services and respond to alerts.
- · Public status page
- · Uptime and performance monitoring
- · Maintenance announcements
- Incident responseBefore launch
What happens when something goes wrong, and how you are told.
- · Incident classification and timelines
- · Customer communication
- · Post-incident reports
- Business continuityBefore launch
Keeping services available through larger failures.
- · Disaster recovery plan
- · Recovery objectives
- · Testing schedule