← Trust Center

Infrastructure

Infrastructure & hosting

SwiftCode runs on managed cloud infrastructure in the United States, built for isolation, encryption, and recoverability. We favor managed services so provider-hardened patching and backups reduce operational risk.

Hosting

Application services run on managed cloud compute, with managed data services behind them.

  • Application services run on AWS (ECS Fargate) in the United States (us-west-2).
  • PostgreSQL and Redis run as managed AWS services with provider patching and automated backups.
  • Realtime delivery is load-balanced with Redis pub/sub, plus Apple Push Notification service for alerts.

Networking

Internal services are not exposed to the public internet.

  • Internal services (database, cache, message broker) are restricted to a private network, reachable only from application services.
  • Public endpoints sit behind a managed load balancer.
  • No direct public access to data or messaging tiers.

Identity & secrets

Credentials live in a managed secrets store, never in source or images.

  • Application secrets are stored in AWS Secrets Manager and encrypted with a dedicated KMS key — never embedded in code or images.
  • Cloud permissions are scoped to least privilege.

Encryption

Data is encrypted in transit and at rest. Certificate-managed TLS termination is being rolled out across all public endpoints.

TLS everywhere

TLS protects data in transit; certificate-managed TLS termination is being rolled out across all public endpoints.

In progress

At-rest encryption

Provided by the managed database layer and KMS.

Implemented

Monitoring

Operational telemetry feeds our production hardening work.

  • Application logs and metrics flow to AWS CloudWatch.
  • Alerting on error rates and infrastructure health is part of production hardening.

Backups & availability

Automated backups are in place today; high availability and a published uptime SLA are part of our production-hardening roadmap.

Automated backups

Managed automated backups of the database layer.

Implemented

High availability

Multi-AZ database, multiple application tasks, and automatic recovery are part of production hardening and defined in infrastructure-as-code.

In progress

Published uptime SLA

We do not currently publish an uptime SLA.

Planned
Verification: live production verification of availability and recovery behavior is shared with enterprise customers during procurement.

Evaluating SwiftCode for your facility?

Enterprise customers may request our security questionnaire, architecture overview, and pilot materials during procurement — under NDA where required.

Request security documentationSchedule a technical review

Security questions? security@swiftcode.tech