Shape’s platform runs on modern cloud infrastructure designed for security, availability, and scale. This page provides a high-level overview of how our infrastructure is designed. As with our encryption practices, we intentionally do not publish specific details about our hosting providers, network architecture, or system configuration — that information is available to customers and prospects under NDA upon request.
Hosting Environment
Shape’s platform is hosted with established, reputable cloud infrastructure providers. Our hosting environment is designed around the following principles:
- Customer environments are logically isolated from one another to help prevent any accidental or unauthorized access between customers.
- Infrastructure is deployed across multiple availability zones to reduce the risk of a single point of failure affecting service availability.
- Our hosting providers maintain their own physical security, environmental controls, and compliance certifications for the facilities that underlie our platform, and we select providers who maintain independently audited security programs.
Network Architecture
Our network architecture is designed to limit and monitor access at multiple layers.
- Access to production infrastructure is restricted to authorized systems and personnel, and is logged and monitored.
- Our environment employs network segmentation and access controls to limit the blast radius of any individual system.
- We use monitoring and alerting to help identify and respond to anomalous activity across our infrastructure.
Backup and Business Continuity
Shape maintains backup and business continuity practices designed to protect customer data and maintain service availability in the event of a system failure or other disruption. Details of our specific backup schedules, retention periods, and disaster recovery procedures are available to customers under NDA.
Requesting Additional Detail
Customers and prospects with specific security or compliance requirements — including procurement and security review teams — can request additional detail about our infrastructure, subject to a mutual non-disclosure agreement. Please contact your account representative or email help@setshape.com to request access.