Modern is hosted on Google Cloud Platform (GCP) infrastructure, the leading cloud infrastructure provider and where www.google.com is hosted. You can read about Google Cloud Platform's Terms on their site here.
Modern is hosted in Central US region with servers spread across several availability zones within that region in order to maximize our uptime.
All communication with Modern's website, applications, and API is performed via HTTPS, utilising 128-bit encryption (bank level encryption).
Third Party Data Access
All access to data via Modern is explicitly approved through an OAuth authorization mechanism which grants access tokens that can be revoked at any time.
We don’t sell customer data to anyone.
For sensitive data where the original values are not needed, such as passwords, we hash the data using the BCrypt algorithm. Where the original values are need, such as authentication tokens details for accessing data, the values are encrypted using the AES-256-GCM algorithm using a unique, randomly generated salt for each set of sensitive data.
Only authorized employees are granted access to our production infrastructure and the use of password managers to ensure strong passwords and two-factor authorization when available is mandated across the company.
Modern is updated frequently through an automated process with zero downtime.
If any downtime is expected as part of a major change (such as a data center migration) we will communicate it at least 48 hours in advance.