Backups and security

Nightly backups and restoring from them, where your data lives, encrypted connections, sign-in verification, sessions, AI and data protection.

Your projects are hosted on servers in Türkiye, every connection is encrypted, and backups are taken automatically every night.

Where your data lives and how it is protected

• Hosted in Türkiye. Our servers are in Türkiye; your files don't leave the country.
• Encrypted connections. All connections between the app, the console and the server are encrypted. Passwords and keys are never stored in plain text.
• We don't hold your card. Payment is taken on iyzico's secure page; your card details never reach PVersion.
• Everyone does only what their role allows. A team has Owner, Admin and Developer roles; who can do what is on the Team and permissions page.

In video projects the camera originals stay on your computer; only proxies and project files go to the server (see Video teams).

Backups every night

For every project server, this happens automatically each night:

1. The archive is verified: recent changes on weekdays, every file on Sundays.
2. The server is backed up and a copy of the file archive is updated. If verification finds a problem, the copy is not refreshed and the last good copy is kept.

A second copy of the backups is kept for 14 days on Turkcell Bulut infrastructure, also in Türkiye. On top of that, the newest backup is regularly opened in a temporary folder and tried out (a restore drill), so you know the backup really restores. The live server is not touched.

The Backups page in the console shows, for each server:

• when the last backup was taken and when the archive was last verified,
• a timeline of recent days: each night's backup (OK, with warnings or failed), drills, backups taken by hand and restores,
• the Restore drill line: the result of the latest drill,
• the Recent backups list.

From here, admins can take an extra backup with Back up now, check the archive straight away with Verify archive, and start a drill without waiting with Run drill.

Restoring from a backup

To undo a single file or a submission you don't need a backup; you do that from the app (see History and undo). Returning the whole server to a backup is the last resort:

1. On the Backups page, find the backup in the Recent backups list.
2. Press Restore on its row.
3. Type the backup's name to confirm, then confirm with Restore.

Sign-in security

Your account settings are on the Account tab of My account in the console.

Password

A password has at least 10 characters. When you change it with Change password, all your other sessions are signed out.

Authenticator app

At sign-in you are asked, besides your password, for a code from an app on your phone (Google Authenticator, Microsoft Authenticator, 1Password and so on). No SMS needed.

1. In the Authenticator app section, type your password in Your password and press Set up.
2. In the app on your phone, add an account and scan the square (QR code) on the screen.
3. Type the 6-digit code the app shows and press Verify and turn on.
4. Save the recovery codes that appear somewhere safe and press Saved them, close. If you lose your phone, you sign in with these; each works once and they are not shown again.

If you tick Trust this device for 30 days when entering the code at sign-in, that browser won't ask for a code for 30 days. To turn the app off, type your password and press Turn off.

SMS verification

In Phone and SMS verification, type your mobile number and press Send code, then enter the code you receive and press Verify. If SMS verification is required at sign-in for your account, the code comes to this number (valid for 5 minutes).

My sessions

The My sessions list shows the browsers and desktop apps where your account is signed in. If there is a computer you don't recognize or no longer have, press Sign out on its row. A desktop app that was signed out asks for approval in the browser before it can be used again.

AI and privacy

For AI tags, PVersion doesn't look at the file itself but at a small preview the app makes when you submit. This is done by PVersion's own machine, not by an outside AI service; nothing goes to outside AI services. For details see AI tags.

Agreements and data protection

The service agreement and the privacy notices are public, plain and versioned: pversion.com/en/agreements.html. You can see the versions you accepted with View the agreements I accepted on the Account tab of My account.

Product news and offers only come if you allow them. With I want to receive marketing messages by email and I want to receive marketing messages by SMS on the same tab you give or withdraw permission at any time. Invitations, password resets and verification messages are always sent.

Taking your data with you

Your data is stored in a standard format, so you can take it and move elsewhere whenever you want. Even if your subscription ends, your access stays open for 30 days. To get your data, open a support case or write to [email protected].