AWS and Cloudflare under every site.
Roam runs on AWS and Cloudflare’s global edge, with a 99.9% uptime SLA and EdgeGuard failover. Patching, upgrades and security are handled centrally.
- uptime SLA
- 99.9%
Every Roam site carries a 99.9% uptime SLA. Across all destinations, the network has recorded 99.9% uptime (network figure, Roam, 2026).
Algolia
Powers instant, typo-tolerant, faceted search.
Mapbox
Powers Region, Product and Itinerary maps.
Cloudflare
Provides the CDN, DDoS protection and Web Application Firewall; Roam CDN and EdgeGuard run on Cloudflare.
AWS
Hosts the platform across multiple Availability Zones.
If the origin goes down, Visitors still get your site.
With Roam EdgeGuard, if your origin server has issues, our edge cache serves your site content 24/7. Behind it, the platform runs on AWS across multiple Availability Zones, with blue/green deployments, auto-scaling and automated backups with rollback.
Security and data
The questions procurement asks.
Where is our data hosted?
Your origin data (database, content, uploaded Assets and user accounts) is hosted in Australia, on AWS across multiple Availability Zones. Public static files are cached at Cloudflare’s global edge so pages load fast everywhere.
Who else is on the same system?
Each client’s content, Assets, configuration and accounts are logically separated in their own Roam instance. Access within Roam is on a need-to-know basis.
What protects the site from attacks?
Cloudflare CDN, DDoS protection and Web Application Firewall; TLS 1.2 and 1.3; HTTP/3; HSTS on every site. Roam CDN, built on Cloudflare, also optimises and resizes images on the fly for every device.
How do our editors log in?
Passwordless one-time-code login for the page builder, so there are no stored passwords to steal. Role-based permissions decide who can edit, review and publish.
What certifications does Roam hold?
Roam Industries Pty Ltd does not hold ISO 27001 or SOC 2 Type II certification in its own name. The platform runs on AWS and Cloudflare infrastructure that does, under a shared responsibility model: AWS holds SOC 1/2/3, ISO 27001, 27017 and 27018, PCI DSS Level 1 and IRAP; Cloudflare holds SOC 2 Type II, ISO 27001 and PCI DSS Level 1. Our own security practices are aligned with the ACSC Essential Eight and the OWASP Top 10.
Do you penetration test?
Regular dependency audits and automated vulnerability scanning; formal third-party penetration testing on request.
How do you handle privacy?
Roam operates in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). Our own privacy policy for this website is at roamhq.io/privacy.
What about insurance and paperwork?
Certificates of currency are available on request, along with our security questionnaire responses.
WCAG-aligned builds, with Userway.
Roam builds are WCAG-aligned, with WCAG support via Userway available, and our partners cover formal accessibility auditing where a council’s obligations call for it. Semantic structure, keyboard paths, contrast, alt text and readable Products are part of how every Roam theme is built. Some integrations carry their own third-party subscription costs.
Upgrades and new features arrive as platform updates.
On a custom build, security patches, dependency upgrades and new features are each a job someone has to scope, fund and schedule. On Roam they are included: every new feature, patch and upgrade is yours for as long as you’re with us, rolled out platform-wide.
- Platform-wide upgrades, included in the subscription.
- Ticket-based support with 1 business day response times.
- Scout AI, our support assistant trained on Roam’s complete knowledge base, answers platform questions 24/7.
- A knowledge base at support.roamhq.io (opens in a new tab).
More of the platform
Platform
Page builder, ATDW sync, search, maps, design and infrastructure.
ATDW integration
40,000+ Products synced; ATDW 2.0 managed centrally.
Design
A bespoke theme for every destination, on one component library.
Integrations
Mailchimp, Google Analytics, Instagram, Everi, Weglot and more.
Editions
Tourism and Business Events editions on one backend and one design language.
We’ll answer your security questionnaire with you.
Security, hosting, privacy, accessibility: ask us anything in a 30-45 minute walkthrough, or send the procurement questions straight through.
- No hidden fees
- Training and support included
- Live in 6-8 weeks