We use Heroku.
Heroku is a cloud application platform. Its physical infrastructure is hosted and managed within Amazon’s secure data centers and utilize the Amazon Web Service (AWS) technology. Amazon’s data center operations have been accredited under:
• ISO 27001
• SOC 1 and SOC 2/SSAE 16/ISAE 3402 (Previously SAS 70 Type II)
• PCI Level 1
• FISMA Moderate
• Sarbanes-Oxley (SOX)
eroku platform is designed to protect customers from threats by applying security controls at every layer from physical to application, isolating customer applications and data, and with its ability to rapidly deploy security updates without customer interaction or service interruption.
Applications on the Heroku platform run within their own isolated environment and cannot interact with other applications or areas of the system, to prevent security and stability issues.
Heroku enables HTTPS for applications and SSL database connections to protect sensitive data transmitted to and from applications.