Teramind utilizes a robust, layered security approach to protect data in the cloud, covering both data at rest and data in motion.
Encryption at Rest: Teramind Cloud data is stored on Oracle Cloud Infrastructure (OCI). All customer data, account credentials, logs, and backups in persistent storage are protected using strong AES 256-bit encryption.
Encryption in Motion: All communication between the Teramind Agent and Teramind servers uses a proprietary protocol over standard TLS, with the agent validating the server's certificate against an embedded Teramind certificate chain. Connections to the Teramind Dashboard use HTTPS (TLS). Connections to your Active Directory domain controller can use StartTLS or LDAPS, configurable in settings.
Access Control: Access to the Teramind Cloud production environment is strictly restricted to a minimal number of vetted personnel on a need-to-know basis (Least Privilege). All access is logged and audited. Teramind Support and Customer Success teams have no standing access to customer data. Access is only possible if explicitly granted by the customer through a temporary Support PIN generated in the dashboard. Creating and using a Support PIN are both logged.
Infrastructure Security: Teramind Cloud runs on dedicated Oracle Cloud Infrastructure in US and EU regions. OCI data centers adhere to major security and compliance frameworks, including SOC 1, 2, and 3, PCI DSS, ISO/IEC 27001, HIPAA and more. Teramind's own ISO 27001:2022 and SOC 2 Type II certifications demonstrate the implementation of strict administrative and technical safeguards for customer data protection.