What we run, and what you own

What this covers

This is a managed machine, not managed code. We are responsible for the machine and everything that keeps it serving; you are responsible for the application running on it and how it behaves.

Before you start

Nothing to prepare — this article exists so there is no argument later about who was meant to do what.

How to do it

1. We own the virtual machine, its operating system and its patches.
2. We own the JDK: installing it, and keeping it current within the version you pinned.
3. We own the machine's toolchain — the JDK, Maven and Gradle — and keep it current within the version you pinned.
4. We own the TLS certificate and its renewal.
5. We own the backups and the monitoring, and we are the ones woken when the machine stops serving.
6. You own your application: its code, its dependencies, its migrations, its correctness, and deploying it.
7. You own your JVM tuning — heap sizing, garbage collector choice, thread pools.
8. You own what your application talks to, including any database it uses.

What our team checks

If you are unsure which side of the line a problem sits on, ask. Support will look, and will tell you plainly if it turns out to be in your application rather than passing it back without explanation.