security

Security commitments.

BlackFog takes data security and privacy extremely seriously. As a security vendor we know what good practice looks like, and it is designed into everything we build.

at a glance

Data in transit

TLS 1.2+

Data at rest

AES-256

Security log retention

365 days

Encrypted database backups

daily

in transit

HTTPS / TLS 1.2+

All traffic is encrypted in transit by default. No exceptions, no opt-in.

at rest

AES 256-bit

All persistent data is encrypted at rest using AES 256-bit encryption or better.

Our controls

Four layers, all of them ours to answer for.

BlackFog was specifically designed to limit data collection by third parties. That principle applies to us too.

Data security

  • All customer data is encrypted in transit and at rest.

  • All traffic encrypted by default via HTTPS/TLS 1.2 or better.

  • All persistent data encrypted using AES 256-bit or better.

Information security

  • A comprehensive information security policy governing every aspect of data protection and handling.

  • Policies reviewed and updated as threats and best practices change.

  • An ingrained security culture: every team member understands the policy and works to it.

Network security

  • Encryption of data in transit and at rest across the network.

  • Built on Amazon AWS infrastructure and its security expertise.

  • Continuous monitoring and auditing of network activity to detect and prevent unauthorized access.

Application security

  • Two-factor authentication on all accounts.

  • Account lockdown on suspected compromise.

  • Critical security log retention for 365 days.

  • Daily backups with incremental, point-in-time encrypted recovery on all databases.

Questions about how we secure your data?

Our support team, knowledge base and release notes are the fastest route to an answer. Customers with a product security concern can reach the security team directly, and certifications and audit reports live in the Trust Center.