How does Bindbee encrypt and store data?
Updated 5 days ago
We encrypt your data at rest with AES-256 and in transit with TLS 1.3. Data is stored in AWS, in the region your organization is deployed in, and it never leaves that region.
Encryption
At rest: storage is encrypted with AES-256. Encryption keys are managed through AWS key management.
In transit: all communication with the Bindbee platform uses TLS 1.3.
Storage and access
Region: your data is stored and processed only in your deployment's AWS region (US or EU).
Failover: each region runs across at least two Availability Zones. Failover happens within the same region, never across regions.
Access control: access to our infrastructure and data stores is restricted by IAM policies and network-level controls.
Retention and deletion
You delete synced data by deleting the connector it came through. After a connector is deleted, its data can be recovered for seven days: email [email protected] with the connector token or origin ID within that window to stop the deletion. After seven days, the data is permanently removed. For details, see Data retention & deletion.
Retention and deletion follow our SOC 2, ISO and GDPR commitments. Our full security documentation is in the Trust Center.