# SLA

FusionAuth Cloud's service-level agreement of instance availability.

> For the index of this section of the site, see [llms.txt](https://4002.18-224-161-104.sslip.io/docs/llms.txt)

Availability of your system is critical; below are some of the steps FusionAuth takes to ensure that FusionAuth Cloud systems are always available:

## All Deployments

*   All components are monitored via external software systems as well as internal metrics gathering systems.
*   The application architecture is not exotic, reducing risk. This is a three tier web application, which is a well understood architecture.
*   Third party security researchers can submit security issues via a bug bounty program.
*   The FusionAuth software and infrastructure is pentested on a regular basis.
*   Major changes, such as FusionAuth upgrades or operating system upgrades, are scripted and rollout timing is controlled by the customer.
*   Modifications to the underlying product are tested extensively, including load testing where appropriate.
*   Automated rulesets provide protection against DDoS.
*   A world class cloud provider's managed services for system components are used where appropriate.
*   Network firewalls are automatically configured on deployment to set up "least privileged" access to each architectural component.

## High Availability (HA) Deployments

*   Each deployment has redundant components. This includes, but is not limited to, the DNS system, load balancer, and the compute nodes running FusionAuth.
*   Each deployment's relational database is set up in a primary/secondary configuration. If the primary becomes unavailable the secondary will "stand up" and the instance will continue to be available. This is also known as "full database replication".
*   Each set of components is run in separate geographic availability zones, geographically separated. This prevents disasters from affecting all components.
*   The FusionAuth engineering team will consult on product implementation and can offer "best practices" advice to further ensure system stability.
*   We size the instance properly for expected traffic, in consultation with the customer.

You can find more information about service level agreements (SLAs) in the [FusionAuth license](https://4002.18-224-161-104.sslip.io/license.md) and [license FAQ](https://4002.18-224-161-104.sslip.io/license-faq.md), including uptime numbers and definitions of downtime.

For all deployments which include backups (HA and Business Cloud), the default backup retention is 3 days.

Related

[Cloud Create a FusionAuth Cloud Account Learn how to create a FusionAuth Cloud account. fusionauth cloudmanaged hosting](https://4002.18-224-161-104.sslip.io/docs/cloud/account/create.md)

[Cloud Delete a FusionAuth Cloud Account Learn how to delete your FusionAuth Cloud account. fusionauth cloudmanaged hosting](https://4002.18-224-161-104.sslip.io/docs/cloud/account/delete.md)

[Cloud Account Learn about the account portal, where you can manage account data, deployments, and licenses. fusionauth cloudmanaged hosting](https://4002.18-224-161-104.sslip.io/docs/cloud/account.md)

[Cloud Cloud-Hosted FusionAuth vs Self-Hosted FusionAuth Learn about the pros and cons of FusionAuth Cloud compared to self-hosted FusionAuth. fusionauth cloudmanaged hosting](https://4002.18-224-161-104.sslip.io/docs/cloud/cloud-vs-self-hosted.md)
---

## Other pages in Reference

> For the full index of this section, see [Cloud](https://4002.18-224-161-104.sslip.io/docs/llms-cloud.txt).

- [Disaster Recovery](https://4002.18-224-161-104.sslip.io/docs/cloud/reference/disaster-recovery.md): Exploring Disaster Recovery (DR) options in FusionAuth Cloud.
- [Instance IP Addresses](https://4002.18-224-161-104.sslip.io/docs/cloud/reference/instance-ip-addresses.md): Get the IP addresses used to access your FusionAuth Cloud instance.
- [FusionAuth Cloud Limits](https://4002.18-224-161-104.sslip.io/docs/cloud/reference/limits.md): Learn how to run FusionAuth in various cloud environments.
- [Regions](https://4002.18-224-161-104.sslip.io/docs/cloud/reference/regions.md): A reference list of physical FusionAuth geolocations.
- [User Data](https://4002.18-224-161-104.sslip.io/docs/cloud/reference/user-data.md): FusionAuth Cloud user data policies.