Encryption
BackupMaster encrypts your data at every stage:- In transit: Data transferred between your BigCommerce store and BackupMaster uses the latest recommended secure cipher suites and TLS (Transport Layer Security) protocols.
- At rest: Backup data stored on Microsoft Azure servers is encrypted with AES-256.
Microsoft Azure infrastructure
BackupMaster’s infrastructure and your data are hosted on Microsoft Azure in the South East US region. Azure data centers comply with industry standards including ISO/IEC 27001:2013 and NIST SP 800-53. Microsoft operations staff maintain, monitor, and administer the facilities 24/7. Azure provides built-in redundancy and high availability, so your backups stay safe during temporary service interruptions.SOC 2 certification
BackupMaster is SOC 2 certified. An independent auditor verifies that BackupMaster’s security controls meet AICPA standards for data security, availability, and confidentiality. Continuous monitoring and an annual audit keep BackupMaster compliant. For details, see SOC 2 certification.Access controls
- BackupMaster connects to your store through the BigCommerce API using OAuth tokens granted during installation.
- Any staff member with app access permissions in your BigCommerce admin can open BackupMaster.
- Access within the app follows BigCommerce’s app permissions.
- The external portal uses a separate password and email verification.
Internal controls
BackupMaster enforces internal policies and processes that safeguard data, protect assets, and restrict access to sensitive systems and infrastructure. Access to customer data and production systems is limited to key staff on a need-to-know basis. All access is logged.How BackupMaster processes your data
- The app reads your store data through the BigCommerce API to create backups.
- It writes to your store only when you run a restore, clone, or import.
- Your data is never sold, shared, or used for any purpose beyond the backup service.
- No code is injected into your storefront.