Data location and backup management

Bloomreach uses Google data centers in 3 regions, based on your business needs:

EMEA: St. Ghislain, Belgium and London, England
North America: Montréal, Canada and Council Bluffs, Iowa, USA
APAC: Sydney, Australia

Infrastructure and redundancy

Bloomreach uses Google Cloud Platform (GCP) as a third-party vendor. GCP runs in a multi-tenant, geographically distributed environment and uses a redundant architecture to support service availability. Google guarantees that data is distributed across shared infrastructure through a distributed file system designed to store extremely large amounts of data across many servers.

The redundant architecture replicates data in real time to at least 2 geographically dispersed data centers. Multiple encrypted network links and interfaces connect the data centers, and dynamic load balancing across these sites provides high availability. To monitor resource availability across its data centers and validate that data is replicated to more than one location, GCP uses a dashboard that shows details such as resource footprint, central processing unit capacity, and random-access memory availability.

Important
File management in Asset manager is the one exception to our GCP-based infrastructure. We don't guarantee the location of files and data stored in Asset manager, so we don't recommend storing anything sensitive there.

Backups

An automated system performs full-system backups daily. All data is also backed up regularly, following Bloomreach backup processes.

Recovery and testing

Because Bloomreach uses infrastructure as code (IaC), the whole infrastructure can be rebuilt and recovered to its previous working state, and any change can be reverted if necessary.

We test these recovery capabilities periodically to make sure everything works as expected. We test the recovery of all components at least once a year or after any significant change to a component.

Disaster recovery plan

Bloomreach has a disaster recovery plan to prevent data loss and ensure quick recovery in case of hardware failure, natural disasters, or other catastrophes. The Bloomreach architecture is set up to minimize interruptions, mainly because all of its components are redundant and located in separate zones.

As an additional precaution, we also have a disaster recovery program. We test recovery components periodically and after any significant change to a component.

Incident response

Our incident management process is designed to identify, confine, monitor, and communicate incidents. If an incident occurs, our Support and Security teams identify, report, and prioritize it for resolution.

Multiple independent on-call support teams help our employees and you address incidents or potential breaches. All incidents are logged in an incident management tool, and this information is automatically shared with internal stakeholders.

If the law requires it, especially for security incidents, we provide you with the information you need to promptly report to your local authorities.

Bloomreach has multiple systems to keep the production environment running without issues. Our highly available monitoring infrastructure continuously monitors data processing pipelines, application performance, resource exhaustion, and availability.