# Infrastructure

**URL:** https://community.alloyapp.io/c/infrastructure/8.md

[Latest](https://community.alloyapp.io/latest.md) · [Categories](https://community.alloyapp.io/categories.md) · [Tags](https://community.alloyapp.io/tags.md)

---

## [About the Infrastructure category](https://community.alloyapp.io/t/about-the-infrastructure-category/15)

<div class="topic-metadata">

**Author:** [@cmcnicholas](https://community.alloyapp.io/u/cmcnicholas)\
**Replies:** 0

</div>

Use this category to discuss infrastructure, e.g. task execution, application limits, deployment, quotas.

---

## [Do you automate integration and deployment pipelines and how do you enforce security, consistency and auditing?](https://community.alloyapp.io/t/do-you-automate-integration-and-deployment-pipelines-and-how-do-you-enforce-security-consistency-and-auditing/657)

<div class="topic-metadata">

**Author:** [@cmcnicholas](https://community.alloyapp.io/u/cmcnicholas)\
**Replies:** 1\
**Last updated:** [10 August 2023 16:29 UTC](https://community.alloyapp.io/t/do-you-automate-integration-and-deployment-pipelines-and-how-do-you-enforce-security-consistency-and-auditing/657 "2023-08-10T16:29:01Z")

</div>

Do you automate integration and deployment pipelines and how do you enforce security, consistency and auditing?

---

## [Is Alloy continually monitored?](https://community.alloyapp.io/t/is-alloy-continually-monitored/242)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:55 UTC](https://community.alloyapp.io/t/is-alloy-continually-monitored/242 "2021-07-30T09:55:41Z")

</div>

Is it continually monitored?

---

## [Are Alloy backups immutable? Are they fixed or can they be changed?](https://community.alloyapp.io/t/are-alloy-backups-immutable-are-they-fixed-or-can-they-be-changed/351)

<div class="topic-metadata">

**Author:** [@jethwa](https://community.alloyapp.io/u/jethwa)\
**Replies:** 1\
**Last updated:** [6 August 2021 13:35 UTC](https://community.alloyapp.io/t/are-alloy-backups-immutable-are-they-fixed-or-can-they-be-changed/351 "2021-08-06T13:35:40Z")

</div>

Are Alloy backups immutable? Are they fixed or can they be changed?

---

## [Does audit data such as verbose logs contain any sensitive information?](https://community.alloyapp.io/t/does-audit-data-such-as-verbose-logs-contain-any-sensitive-information/196)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:54 UTC](https://community.alloyapp.io/t/does-audit-data-such-as-verbose-logs-contain-any-sensitive-information/196 "2021-07-30T09:54:02Z")

</div>

Does audit data such as verbose logs contain any sensitive information? Like passwords in the clear?

---

## [Can the log files of your solution/system be exported?](https://community.alloyapp.io/t/can-the-log-files-of-your-solution-system-be-exported/202)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:54 UTC](https://community.alloyapp.io/t/can-the-log-files-of-your-solution-system-be-exported/202 "2021-07-30T09:54:15Z")

</div>

Can the log files of your solution/system be exported to a log collection system such as Splunk, GrayLog2 or to the Windows Event Log where an agent can collect and forward them for customers process?

---

## [Do you have a process for actual or suspected cyber security incidents or breaches being reported to the customer?](https://community.alloyapp.io/t/do-you-have-a-process-for-actual-or-suspected-cyber-security-incidents-or-breaches-being-reported-to-the-customer/233)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:55 UTC](https://community.alloyapp.io/t/do-you-have-a-process-for-actual-or-suspected-cyber-security-incidents-or-breaches-being-reported-to-the-customer/233 "2021-07-30T09:55:21Z")

</div>

All actual or suspected cyber security incidents or breaches must be reported to our Information & Cyber Security Manager. Do you have a process for this?

---

## [If you use AWS, do you use Amazon GuardDuty Threat Detection?](https://community.alloyapp.io/t/if-you-use-aws-do-you-use-amazon-guardduty-threat-detection/245)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:55 UTC](https://community.alloyapp.io/t/if-you-use-aws-do-you-use-amazon-guardduty-threat-detection/245 "2021-07-30T09:55:49Z")

</div>

If you use AWS, do you use Amazon GuardDuty Threat Detection?

---

## [If you use AWS, do you use Amazon Shield?](https://community.alloyapp.io/t/if-you-use-aws-do-you-use-amazon-shield/246)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:55 UTC](https://community.alloyapp.io/t/if-you-use-aws-do-you-use-amazon-shield/246 "2021-07-30T09:55:51Z")

</div>

If you use AWS, do you use Amazon Shield?

---

## [Where is the data held in the cloud? UK, EEC or Outside of the EEC?](https://community.alloyapp.io/t/where-is-the-data-held-in-the-cloud-uk-eec-or-outside-of-the-eec/248)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:55 UTC](https://community.alloyapp.io/t/where-is-the-data-held-in-the-cloud-uk-eec-or-outside-of-the-eec/248 "2021-07-30T09:55:57Z")

</div>

Where is the data held in the cloud? UK, EEC or Outside of the EEC.

---

## [Is there any Data Pinning in place?](https://community.alloyapp.io/t/is-there-any-data-pinning-in-place/249)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:55 UTC](https://community.alloyapp.io/t/is-there-any-data-pinning-in-place/249 "2021-07-30T09:55:59Z")

</div>

Is there any Data Pinning in place? Will this expire during the contract?

---

## [How is the data protected in transit?](https://community.alloyapp.io/t/how-is-the-data-protected-in-transit/251)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:56 UTC](https://community.alloyapp.io/t/how-is-the-data-protected-in-transit/251 "2021-07-30T09:56:04Z")

</div>

How is the data protected in transit, especially if that data contains Personal Data to comply with the DPA requirement for securing data in transit?

---

## [Do you wish to send email from Alloy using our domain or smtp server?](https://community.alloyapp.io/t/do-you-wish-to-send-email-from-alloy-using-our-domain-or-smtp-server/254)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:56 UTC](https://community.alloyapp.io/t/do-you-wish-to-send-email-from-alloy-using-our-domain-or-smtp-server/254 "2021-07-30T09:56:10Z")

</div>

Do you need to be added to the SPF list so Alloy can send mail from the customers domain or smtp server?

---

## [Have you implemented DKIM, DMARC and SPF on your email service?](https://community.alloyapp.io/t/have-you-implemented-dkim-dmarc-and-spf-on-your-email-service/255)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:56 UTC](https://community.alloyapp.io/t/have-you-implemented-dkim-dmarc-and-spf-on-your-email-service/255 "2021-07-30T09:56:12Z")

</div>

Have you implemented DKIM, DMARC and SPF on your email service?

---

## [What is your backup schedule?](https://community.alloyapp.io/t/what-is-your-backup-schedule/259)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:56 UTC](https://community.alloyapp.io/t/what-is-your-backup-schedule/259 "2021-07-30T09:56:21Z")

</div>

What is the schedule?

---

## [Do you use tapes as your backup solution?](https://community.alloyapp.io/t/do-you-use-tapes-as-your-backup-solution/262)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:56 UTC](https://community.alloyapp.io/t/do-you-use-tapes-as-your-backup-solution/262 "2021-07-30T09:56:28Z")

</div>

How often do you replace your backup solution and how are tapes migrated from one solution to another to ensure old backups are still readable?

---

## [Does the solution use online replication between sites/datacentres?](https://community.alloyapp.io/t/does-the-solution-use-online-replication-between-sites-datacentres/263)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:56 UTC](https://community.alloyapp.io/t/does-the-solution-use-online-replication-between-sites-datacentres/263 "2021-07-30T09:56:30Z")

</div>

Does the solution use online replication between sites/datacentres?

---

## [Where is Alloy Data Stored?](https://community.alloyapp.io/t/where-is-alloy-data-stored/268)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:56 UTC](https://community.alloyapp.io/t/where-is-alloy-data-stored/268 "2021-07-30T09:56:41Z")

</div>

Where is Alloy Data Stored?

---

## [Will remote access be required?](https://community.alloyapp.io/t/will-remote-access-be-required/279)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:57 UTC](https://community.alloyapp.io/t/will-remote-access-be-required/279 "2021-07-30T09:57:04Z")

</div>

Detail why remote access will be required.

---

## [Is Site to Site VPN required?](https://community.alloyapp.io/t/is-site-to-site-vpn-required/282)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:57 UTC](https://community.alloyapp.io/t/is-site-to-site-vpn-required/282 "2021-07-30T09:57:10Z")

</div>

Is direct access or Site to Site VPN required for the solution to work?

---

## [Which Certification Authority do you use?](https://community.alloyapp.io/t/which-certification-authority-do-you-use/289)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:57 UTC](https://community.alloyapp.io/t/which-certification-authority-do-you-use/289 "2021-07-30T09:57:25Z")

</div>

Which Certification Authority do you use? (For us to validate the CPS if required).

---

## [Does the solution use Client Certificates for authentication or S/MIME?](https://community.alloyapp.io/t/does-the-solution-use-client-certificates-for-authentication-or-s-mime/294)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:57 UTC](https://community.alloyapp.io/t/does-the-solution-use-client-certificates-for-authentication-or-s-mime/294 "2021-07-30T09:57:36Z")

</div>

Does the solution use Client Certificates for authentication or S/MIME?

---

## [Does the solution use Client Certificates for signing to provide non-repudiation?](https://community.alloyapp.io/t/does-the-solution-use-client-certificates-for-signing-to-provide-non-repudiation/295)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:57 UTC](https://community.alloyapp.io/t/does-the-solution-use-client-certificates-for-signing-to-provide-non-repudiation/295 "2021-07-30T09:57:38Z")

</div>

Does the solution use Client Certificates for signing to provide non-repudiation?

---

## [Are Self Signed Digital Certificates used?](https://community.alloyapp.io/t/are-self-signed-digital-certificates-used/297)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:57 UTC](https://community.alloyapp.io/t/are-self-signed-digital-certificates-used/297 "2021-07-30T09:57:42Z")

</div>

If Self Signed Digital Certificates are used, please explain the business reason for this and please specify if these can be replaced with Certificates signed by either the WCC internal CA, or an external CA (and who wou…

---

## [Are there real-time alerts?](https://community.alloyapp.io/t/are-there-real-time-alerts/305)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:57 UTC](https://community.alloyapp.io/t/are-there-real-time-alerts/305 "2021-07-30T09:57:59Z")

</div>

How are users/IT notified about issues affecting access to the service?

---

## [How is the communication between the Client/Mobile and the Service encrypted?](https://community.alloyapp.io/t/how-is-the-communication-between-the-client-mobile-and-the-service-encrypted/330)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:58 UTC](https://community.alloyapp.io/t/how-is-the-communication-between-the-client-mobile-and-the-service-encrypted/330 "2021-07-30T09:58:52Z")

</div>

How is the communication between the Client/Mobile and the Service encrypted?

---

## [Can direct access to the database be made available?](https://community.alloyapp.io/t/can-direct-access-to-the-database-be-made-available/317)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:58 UTC](https://community.alloyapp.io/t/can-direct-access-to-the-database-be-made-available/317 "2021-07-30T09:58:25Z")

</div>

Can direct access to database using PL/SQL etc? be made available?

---

## [Does the solution require an EV certificate?](https://community.alloyapp.io/t/does-the-solution-require-an-ev-certificate/293)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:57 UTC](https://community.alloyapp.io/t/does-the-solution-require-an-ev-certificate/293 "2021-07-30T09:57:34Z")

</div>

Does the solution require an EV certificate?

---

## [Are any Trusted Root Certificates included in the standard build](https://community.alloyapp.io/t/are-any-trusted-root-certificates-included-in-the-standard-build/288)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:57 UTC](https://community.alloyapp.io/t/are-any-trusted-root-certificates-included-in-the-standard-build/288 "2021-07-30T09:57:23Z")

</div>

Are any Trusted Root Certificates included in the standard build removed from the server?

---

## [Can you limit user access to Alloy to specific IP ranges](https://community.alloyapp.io/t/can-you-limit-user-access-to-alloy-to-specific-ip-ranges/287)

<div class="topic-metadata">

**Author:** [@system](https://community.alloyapp.io/u/system)\
**Replies:** 1\
**Last updated:** [30 July 2021 09:57 UTC](https://community.alloyapp.io/t/can-you-limit-user-access-to-alloy-to-specific-ip-ranges/287 "2021-07-30T09:57:21Z")

</div>

Can you limit user access to Alloy to specific IP ranges

[Next page](https://community.alloyapp.io/c/infrastructure/8.md?page=1)
