Backup Encrypted
----------------

System backups include copies of the full system configuration as well
as the full contents of the database. Thus theft of a backup would
effectively constitute theft of all customer data stored on the
platform. To mitigate this risk backups are encrypted using a strong
2048-bit in-line GPG encryption.

The encryption key for this is auto-generated by the platform based on a
unique machine UUID. While it's possible for support to recover backups
from a different machine this process is deliberately hard and only
available to official technical support representatives. Backups on
shared locations are separated on a per-source-machine basis to prevent
conflicts.