What kind of security mechanisms are in place?
📘 Introduction
This article gives you an overview of the security mechanisms that have been implemented to secure your data and user privacy information. The GeoCloud Drive uses industry standards. The security mechanisms and methods are regularly revised and are kept up to date to ensure the highest amount of security for your data.
🔐 Data Security
The data in transit is encrypted and secured with the TLS 1.2/1.3 method.
The data on the cloud storage is encrypted with AES-256.
🌍 Server locations
The server, which hosts the data, is located in Ireland.
The servers, which host the user data (myWorld ID), are located in Germany (Frankfurt) and France (Paris).
🔐 Authentication & Authorization
Authentication method: OIDC
Authorization method: OAuth2
2FA: (Optional) TOTP via any authenticator app
🔐 Access Management
GeoCloud Drive Access Management (IAM) allows controlling who can access which data and resources.
Permissions can be set to restrict access based on roles and users.
🔐 Recovery
RTO (Recovery Time Objective): <24h
RPO (Recovery Point Objective): 24h
Recovery of single files: 24h
🔐 Security Assessments
Penetration tests are regularly performed by an external company.