own firewall. Kumu has no access to the server unless specifically granted access by the host. Data is stored locally on the machine and backups are the responsibility of host. Internally the machine includes it's own firewall, only exposing the required ports necessary for operation (80/443 for the app and 22 for ssh). Internal services (such as the database services) only listen for connections on the local loopback address. Patching of the core operating system and running services is managed by Kumu. This includes patches for functionality, stability, and non-critical security updates. These updates will typically be released once per month and delivered via a downloadable link. Critical security patches will be released immediately as they become available, outside of the standard product release cycle. OVERVIEW