Hello, everyone.
Ryan (aka Phunky) here from Lucky Friday Labs, LLC. I have verified with our tech team that we only use “single tenancy” on our nodes. All of our validators (and RPCs, etc) are run on fully owned bare metal servers and are under lock and key in SOC2 compliant Tier 4 and Tier 5 data centers.
The only two members of our team who have physical access to the server racks locked within these cages are gentlemen with over 30 years of data center experience, one of whom used to work for the US Department of Defense and the other used to do cybersecurity work for the FBI.
Rest assured, we take security very seriously and are incredibly cautious in our set up and maintenance of all nodes. We have recently signed lease agreements for more SOC2 data center space in Phoenix, AZ and in Amsterdam, and we hope to have both of these live with new servers by the end of Q4. This will put us on four continents, I believe, and we have aims to be on every continent at some point in 2024.
P.S. - We are currently in the process of our own internal SOC2 audit for our team and its practices, and once we achieve this certification we will begin the process of applying for the more specific and stringent CCSS audit.