Data at Rest:
All customer data, account credentials, logs, and backups in persistent storage are protected using AES 256-bit encryption.
Data in Motion:
All communication between the Teramind Agent and Teramind servers uses a proprietary protocol over standard TLS, with the Agent validating the server's certificate against an embedded Teramind certificate chain.
Connections to the Teramind Dashboard use HTTPS (TLS).
Connections to your Active Directory domain controller can use StartTLS or LDAPS, configurable in settings.
User and group synchronization with Microsoft Entra ID (Azure AD) uses the Microsoft Graph API over HTTPS (TLS).
Optional end-to-end encryption is also available for On-Premises deployments.