CloudDesk
Sign in Start free trial
Trust

Security and compliance

How CloudDesk protects customer workspaces, and what you can verify yourself.

Platform controls

  • Encryption in transit
    TLS terminated at the edge for every workspace endpoint.
  • Encryption at rest
    Volume level encryption for database and document storage.
  • Least privilege service accounts
    The application runs unprivileged inside its container.
  • Restricted secret store
    Deployment secrets are mounted read-only and never served by the web tier.

Customer controls

  • Role based access
    Capabilities are attached to roles, not individuals.
  • Account recovery policy
    Recovery codes are single use, expire in 30 minutes and never reveal the password.
  • Audit retention
    12 months on Business, 365 days on Enterprise.
  • Data residency
    EU or US regions selected per workspace.

Certification status

ISO/IEC 27001
Certified — surveillance audit completed, certificate valid to 2027-04-18
SOC 2 Type II
Report available to customers under NDA
GDPR
Data processing agreement published; EU data residency available
Penetration testing
Annual third-party assessment, summary available on request