Legal / security
Security and Shared Responsibility
Effective date: October 27, 2026. This statement is not a certification or service-level guarantee.
Customer responsibilities
Customers remain responsible for ownership and independent access to cloud accounts and domains, application code and dependencies, lawful data use, patch planning, recovery arrangements, team access, and review of authorized automation.
HostForge responsibilities
HostForge intends to safeguard the management software, access controls, communications, and secrets under its control using reasonable measures. Encryption, update signing, incident procedures, permissions, and support commitments require verification before being stated as guarantees.
Infrastructure and agent operations
Cloud, DNS, repository, and other providers control their own systems. An agent may perform authorized operations with real infrastructure consequences. Maintain independent provider access and an offboarding plan; application continuity after disconnecting management is not promised.
No overstatement
HostForge does not claim ISO 27001, SOC 2, PCI DSS, immutable backups, 24/7 monitoring, penetration-test coverage, or independent certification without current evidence and approval.