Security+

Secure Compute

Using our IPFS network's Edge SGX service uses Intel's SGX Trusted Execution Environments (TEEs) to keep data encrypted and secure.
Data is only decrypted within the enclave.

Remote Attestation

Our IPFS network uses Intel SGX DCAP ECDSA Attestations to verify the trustworthiness of communications between enclaves.
This is combined with mutual TLS (mTLS) to ensure that both parties verify encryption and certificates before establishing a secure connection.

Privacy-Preserving Applications

Our IPFS Network integrates Intel SGX processors to help developers build secure, scalable, and privacy-preserving applications.

Key Storage

Our IPFS network stores keys using OS-level keychains, such as the Keychain app on macOS, Pass on Linux/Ubuntu, and Windows Credential Store on Windows.

Key Backups

Our IPFS network uses a cloud API called Space Services to securely store user private keys.

What Does SOC 2 & GDPR Compliance Mean for You?

SOC 2 Type II is one of the highest standards in data security, and achieving this means our API platform has passed rigorous security audits and controls to ensure your data is handled with the utmost care and protection.

Why Is This Important?

Stronger Security – With SOC 2 compliance, you can be confident that our APIs has implemented advanced security measures to protect your data.
Improved Reliability – SOC 2 reinforces our commitment to delivering a stable and available platform so you can work without interruptions.
Increased Trust – SOC 2 certification assures you that our APIs is held to the highest data protection standards, meeting the needs of even the most security-conscious industries.

By meeting these strict criteria, our API platform demonstrates our dedication to keeping your information safe while providing you with a seamless and secure API development experience.

Whether you’re designing, testing, or documenting APIs, you can trust that your data is in secure hands.

We are fully GDPR-compliant.

The app provides multiple layers of security:

Protection against DDoS attacks through rate limiting
Prevention of CSRF attacks
Protection against XSS through CSP headers
Prevention of clickjacking through X-Frame-Options
Control over browser features through Permissions-Policy
Size limits on API requests to prevent abuse

Our apps follow security best practices while maintaining its existing functionality.

The security measures are applied intelligently - rate limiting and CSRF protection are only enforced on API routes, while security headers are applied globally.

Learn more.