A: Hi there! Thank you for the great technical questions. Here is a breakdown of our architecture:

1) Where are your data centers? Our entire infrastructure is hosted on Oracle Cloud Infrastructure (OCI). We utilize their enterprise-grade regions to ensure high performance, low latency, and secure data residency.

2) Are you SOC 2 Type II audited?

Oracle Cloud Infrastructure is fully SOC 2 Type II, ISO 27001, and PCI-DSS compliant. As a platform, NoCodeBackend strictly leverages this highly compliant infrastructure. We natively inherit the stringent physical and network security controls provided by Oracle Cloud.

3) How do you handle data encryption? (field by field, at rest)

At Rest: All block storage volumes (where the databases reside) are encrypted at rest using industry-standard AES-256 encryption.
In Transit: All data moving between your applications, our API gateways, and the databases is encrypted using TLS 1.2/1.3.
Application Level: We also utilize aes-256-cbc encryption at our Node.js API layer to actively encrypt sensitive data (such as integration tokens or secrets) before it is ever written to the database.
4) How are your generated DBs isolated from the Internet? Every database generated by NoCodeBackend is deployed within a secure Virtual Cloud Network (VCN) on private subnets. They do not have public IP addresses and are completely isolated from the open internet. All external queries are strictly routed and authenticated through our secure Node.js API Gateway.

5) What systems exist to protect DBs from direct attacks? Because the databases reside in private subnets without public IPs, direct internet attacks (like brute-forcing database ports) are structurally impossible. Furthermore, we employ:

Cloudflare Web Application Firewall (WAF) and automated DDoS protection to filter malicious traffic at the edge.
Automated Rate Limiting at the API layer.
Strict Network Security Groups (NSGs) to ensure that only our authorized backend workers are permitted to communicate with the databases.
6) How do you handle data backups? We automatically retain secure database backups for the last 7 days to ensure strict GDPR compliance and data recovery capabilities. In addition to our automated backups, users have full control to trigger their own manual database snapshots at any point in time directly from the NoCodeBackend dashboard.

7) What about replication and fail-over?

Currently, to optimize for maximum performance and provide a cost-effective solution, databases are deployed as high-performance single-node instances. However, these nodes are backed by persistent, encrypted block storage. If a compute instance ever becomes unresponsive, our infrastructure is designed to rapidly reattach that persistent storage volume to a healthy replacement node—minimizing downtime while completely protecting your data.