Shared responsibility model

Dyncloud is a managed service, but security is always shared. This page makes clear what Dynapps España takes on and what stays on your side, so there are no gray areas.

What Dyncloud (Dynapps España) manages

Infrastructure: compute, storage, and network capacity in Spain.
Platform: orchestration on top of Kubernetes, isolation between environments, and the entry gateway.
Platform security: encryption in transit and of secrets at rest, secrets management, network segmentation, patching, and vulnerability management.
Availability and operation: monitoring, self-healing, scaling, and response to platform incidents.
Backups and recovery of the environment and its data.
Deployment and updates of your application in a controlled manner.

What stays on your side (customer)

Data and content that you enter into your application.
Users and permissions within the application: who accesses which business functions and data.
Good account practices: protecting credentials, enabling two-factor verification when offered, and revoking access for people who leave your organization.
Compliant use: using the service in accordance with applicable law and the contractual agreement.

What we manage jointly

Integration with your corporate identity provider (single sign-on), when applicable.
Definition of retention and recovery needs tailored to your business.
Management of incidents affecting your data: we detect and contain at the platform level; we inform you and coordinate with you on the part that corresponds to you.

Summary

We are responsible for the platform and its secure operation. You are responsible for use and business data. The boundary is documented, and if you have questions about a specific case, we'll clarify it in writing.