Skip to main content

How we handle your data and access

We work inside your systems, so you should know exactly what we keep, where, and for how long. This page describes what we actually do.

Last updated 12 November 2026

Where your data lives

Your data lives on a server in your own hosting account, in the region you choose. We connect to it remotely to do the agreed work. The server and the accounts belong to you.

What we collect, and when

During onboarding we collect only what we need to do the work: details of your current setup, and the access required.

Passwords

Credentials you give us are kept in a secured password vault that both you and we can access. If you prefer, the vault is hosted on your own server. When the work has been handed over, the credentials are deleted, and you can verify that for yourself.

Our working files

The files and notes we use to build your setup, meaning configuration files and a record of what we deployed, are kept in a private repository on GitHub during the work and for one month after it ends. They never contain passwords. After that month they are deleted.

How we protect access

We use multi-factor authentication on the accounts we work from, and everything we set up is served over encrypted connections (HTTPS).

Who has access

Only you and TrySelfHost have access to your systems and your data. No one else does.

Updates, backups and monitoring

We apply security updates once they have been tested. We set up backups, stored in your own storage account or on another server of yours, as you decide, and we restore one now and then to prove it works. We watch disk space, certificate expiry and the health of your services, so problems are found before your team finds them.

If something goes wrong

If we find a security problem that affects your systems, we tell you without undue delay, explain what we know and what we are doing about it, and keep you informed until it is resolved.

If you leave

When the arrangement ends we remove our access and delete any of your data we hold. The working files described above are deleted after one month.

Data protection agreement

If we handle personal data on your behalf, we sign a data processing agreement before we start.

Independent certification

TrySelfHost is not independently audited or certified. If your organisation has security requirements, tell us in the review and we will say plainly whether we can meet them.

This website

How we treat the details you send through this website is described in our Privacy Policy.

Questions about any of this? Ask in a free 30-minute review, or email hello@tryselfhost.com.

Free, no commitment. We reply within one business day.