Hosting, data location and isolation

Hosting and recovery locations

For standard deployments, we use separate availability zones within the AWS UK region to provide resilience. Backup copies remain in the UK. This provides protection against an availability-zone failure; it is not recovery between independent UK regions.

Hosting in other countries is available (subject to contract) wherever AWS provides hosting infrastructure, subject to an agreed deployment scope and configuration. Where this applies, we agree the hosting, backup and recovery locations for each deployment, taking account of the AWS services and resilience options available in the selected country.

Separating customer data

Simana operates as a multi-tenant service using shared infrastructure. Customer data, configuration and access to workloads are logically separated through organisation boundaries, server-enforced permissions and tenant-scoped access controls.

The standard service does not provide dedicated physical infrastructure for each customer. Access to content is governed by the permissions assigned to authorised users and teams.

Hosting and other processing locations

The application’s hosting location does not describe every location in which information is processed. Some information is also processed by third-party services used to support and deliver Simana. Our Privacy Policy explains how information is shared and transferred internationally. See our subprocessor register for provider-specific details.

For further information, see Physical security and Backup and disaster recovery.