RedminePRO by HAZERCLOUD
Security & compliance

Security, compliance and where your data lives.

You manage your projects. We manage everything else: Redmine itself, servers, patching, backups, and certifications.

Contact the security team

You manage your projects. We manage everything else.

What you control

  • Full Redmine admin access
  • Users and roles
  • Permissions
  • Workflows
  • Custom fields and trackers
  • Project structure
  • Feature configuration
  • Your data

What we manage

  • OS and security patching
  • Uptime and scaling
  • Encrypted backups with point-in-time recovery
  • TLS in transit
  • Disaster recovery
  • The certification below

Certifications.

HAZERCLOUD maintains active ISO/IEC 27001 certification covering its information security management system, and RedminePRO operates inside that certified ISMS.

Data protection

AES-256 encryption at rest, TLS 1.2 or higher in transit, encrypted continuous backups with point-in-time recovery.

Region & residency

Choose your region at signup, and your data stays there. SSD-fast infrastructure in the US, Ireland, France and India, with encrypted backups and validated disaster recovery.

US
EU
FR
IN

Access control.

Full admin access is yours from day one, on every plan
SSO via Google from Plus and Microsoft / Entra from Business, with an org-wide enforcement toggle
Audit-relevant activity stays inside your own Redmine workspace
Your files and database, provided on request if you ever want to self-host again

ISO/IEC 27001

The certificate belongs to the operating company and its security processes, and RedminePRO runs within them. We say it that way because that is what the certificate covers. Payments are handled by Stripe, so card data never touches RedminePRO systems. If your organization carries its own regulatory obligations, we can support you in meeting them, and we would rather be exact about what we hold than impressive about it.

GDPR and where your data lives

You choose your region at signup (US, Ireland, France or India) and your data stays there. Indian customers have a dedicated page for the Mumbai region and local billing. For European teams that means EU data residency without a workaround. For Indian and APAC teams, India is one of them. Encryption is on by default: AES-256 at rest on all databases and disk volumes, and TLS 1.2 or higher in transit on every service and API. Backups are continuous and encrypted, with point-in-time recovery. Staff access customer data only when required for support, restricted by job function and monitored, and passwords are stored salted and hashed, not recoverable by our team. Because RedminePRO is standard open-source Redmine, your full data is available on request if you ever want to leave.

Uptime and SLA

RedminePRO's marketing target is 99.99% uptime, and the Business plan carries a contractual 99.9% uptime SLA. Underneath, the platform keeps continuous, encrypted backups with point-in-time recovery, so an incident is a recovery, not a data-loss event. We monitor availability and health around the clock and handle patching and version upgrades for you, on our schedule, so keeping the service current is our job, not a maintenance window on your calendar.

A custom SLA and DPA come with the Enterprise plan.

Security questions.

Do I get full admin access to my Redmine workspace?
Yes, on every plan, from Startup up. You configure users, roles, workflows and features exactly as you would self-hosted.
What does HAZERCLOUD manage vs. what do I manage?
We manage Redmine itself along with the server, OS, patching, backups, and uptime. You manage your projects: workflows, issues, roles and configuration.
Where is my data hosted?
In the US, Ireland, France or India, your choice at signup.
Can I export my data and leave?
Yes. We'll provide your full files and database on request, so you can self-host any time. No lock-in.