Hi @cyrus
Here’s the response I received.
We use Amazon RDS’s AES-256 encryption; for more details on this: please refer to Amazon’s documentation. Additionally, Bubble has completed the Cloud Security Alliance CAIQ Assessment. You can find this document
here.
In regards to backups: For most of our key systems, it is actually point in time recovery via incremental snapshots. We use AWS’s RDS service to do backups, which means that AWS maintains and tests our backups (and that they are cloud based)