Understanding data security kDrive

This guide details the means used by Infomaniak to secure all your data kDrive, whether personal (medical data, identification or connection information) or even sensitive (financial information, trade secrets, intellectual property information, research and development, etc.).

Data security and confidentiality

The kDrive infrastructure consists of several services and servers based on different technologies. The content and structure of each client's content are systematically encrypted and permanently stored on at least 3 locations in several Infomaniak-controlled data centers. The data is stored and processed exclusively in data centers installed in Switzerland. The TIER III+ data centres guarantee high availability and redundancy of N+1 for its critical components.

Storage is done via Swift, a distributed and highly available cloud data storage technology.

kDrive integrates several levels of protection to protect files:

1. To protect the data being transferred, the use of SSL/TLS encryption protocol.
2. To protect saved data, 128-bit AES encryption (AES-128-CBC) with an individual and unique key per kDrive space.

Infomaniak regularly tests kDrive applications and infrastructure to identify possible security vulnerabilities that they may present, thereby enhancing security and providing protection against attacks.

But also...

• kDrive offers a log of access to the data and a history of the actions can be consulted directly from the Manager; it is possible to access a progress report to monitor the history of user actions throughout your kDrive; you can also track your data and changes made to each document, spreadsheet or presentation.
• Only people with a link to public files can view them.
• The two-step validation offers an additional level of security when connecting; if you use the two-step validation, you can choose e.g. authentication by kAuth application.
• Be aware of this other guide if you are looking for information on data analysis.