Data Security

People ask, "How safe is my data?"

This is really three questions in one:

• Is my data safe from loss and disaster?
• Is my data safe from hackers?
• Is the app always up, on and working?

At M-Book, we take all of these questions seriously, and we guard your data like it is our own.

Is my data safe from loss and disaster?

We use cutting-edge database clustering technology in the form of MariaDB with Galera Cluster.

Galera Cluster is a synchronous cluster server, which gurantees that your data is replicated to all of our servers when saving any data. When you create a Booking, or when you save a Service, or when you add a Client, many copies of the data are made at the same time and are stored on multiple servers.

In the event of disaster - say, if one of our servers stopped working - our cluster will continue to operate, and you will not lose any data. You won't even know that a problem has occurred.

This also allows us to upgrade or replace our servers without ever taking M-Book offline, giving you incredible up-time.

Is my data safe from hackers?

We hope so, yes.

All of our servers are remotely installed and automatically managed, so that all their security settings are up to date, and their firewalls make them largely invisible to the Internet. There is no direct "shell" access.

We use technologies such as Fail2Ban and Knockd to block hacking attempts and to keep our servers invisible to the internet in general.

All server authentication is key based. Passwords cannot be "brute-forced".

We use AppArmor to make sure that even if our webserver is compromised, hackers cannot read or write any data outside of what our application needs, making a server compromise incredibly unlikely.

Is M-Book always up, on and working?

We employ many technologies to help us keep M-Book up 24/7.

Our clustering and security technology has been touched on above.

We also do extensive monitoring with Prometheus and Graphana to give us real-time stats on performance and problems.

In addition to this, we also use custom monitoring of individual requests, which tells us of the performance of every single request, and alerts us if any part of M-Book is running more slowly than it should. This monitoring goes right down to the database level, giving us timing stats for individual algorithms. This allows us to keep M-Book running incredibly fast under load.

If there is a problem with M-Book and you see an error, our Engineers will already have been notified of all the details of the error, how and why it occurred, and will start working on it instantly.