This guide details the measures implemented by Infomaniak to secure all your data kDrive, whether personal (medical data, identification or login information) or even sensitive (financial information, trade secrets, intellectual property information, research and development, etc.).

Data security and confidentiality

The kDrive infrastructure consists of several services and servers based on different technologies. The content and structure of each client's data are systematically encrypted and continuously backed up in at least 3 locations across several data centers managed by Infomaniak. The data is stored and processed exclusively in data centers located in Switzerland. The TIER III+ data centers guarantee high availability and N+1 redundancy for their critical components.

Storage is handled via Swift, a distributed and highly available cloud data storage technology.

kDrive integrates several levels of protection to safeguard files:

1. To protect data in transit, the SSL/TLS encryption protocol is used.
2. To protect stored data, AES 128-bit (AES-128-CBC) encryption with an individual and unique key per kDrive space.

Infomaniak regularly tests the applications and kDrive infrastructure to identify potential security vulnerabilities, thereby enhancing security and ensuring protection against attacks.

But also…

• kDrive offers a data access log and action history that can be viewed directly from the Manager; you can access an activity report to monitor the action history of all users in your kDrive; you can also track your data and changes made to each document, spreadsheet, or presentation.
• Only those with a link to the public files can view them.
• Two-step validation provides an additional level of security when logging in; if you use two-step validation, you can choose, for example, authentication via the kAuth application.
• Refer to this other guide if you are looking for information on data analysis.