ZebraByte Cloud Infrastructure Security
Overview of ZebraByte Cloud's security controls, including EU/US region isolation, encryption, secret management, monitoring, and encrypted backups.
This page provides a high-level overview of security controls for ZebraByte Cloud. Detailed architecture, operational procedures, and audit evidence are shared through the Compliance Portal or during a security review.
Data and tenant isolation
Section titled “Data and tenant isolation”ZebraByte Cloud is available in separate EU and US regions. Your organization’s data is stored in the region selected during onboarding.
Customer organizations are logically isolated through tenant-scoped authorization and data access controls. Regional infrastructure is shared across Cloud customers and is not dedicated hardware for each organization.
Security controls
Section titled “Security controls”- Network boundaries restrict direct access to application workloads and data services.
- Encryption protects data in transit and at rest. Sensitive application fields receive additional application-level encryption.
- Secret management keeps service credentials separate from application data and limits access according to operational roles.
- Access control applies least-privilege permissions to infrastructure and production operations.
- Monitoring supports detection and response for service and infrastructure events.
Backups and recovery
Section titled “Backups and recovery”ZebraByte Cloud uses encrypted daily backups and point-in-time recovery (PITR) with a five-minute recovery point objective. Backup retention, restoration procedures, and availability commitments are defined in applicable agreements and security documentation.
Customer access
Section titled “Customer access”- Organization owners and administrators control membership, roles, and integrations.
- Stored integration credentials are not displayed back to users.
- Security concerns can be reported to security@the platform.com.
Shared responsibility
Section titled “Shared responsibility”These controls apply to ZebraByte Cloud. In a self-hosted deployment, your organization is responsible for infrastructure security, encryption, secrets, backups, monitoring, and production access.
Security documentation
Section titled “Security documentation”For subprocessors, certifications, control details, and audit artifacts, see the Compliance Portal. The Privacy Policy describes data processing and retention.