Security at Every Layer
deepcloud was built security-first. Every architectural decision, from how we store passwords to how we handle sessions, was made with your protection as the top priority.
Security Principles
The foundational security design choices that protect your data.
AES-256-GCM Encryption
Every file is scanned for malware and then encrypted with AES-256-GCM before it is stored.
Zero-Knowledge Architecture
Our servers store only encrypted ciphertext. We have no ability to decrypt your data — mathematically impossible without your key.
Client-Side Key Derivation
Encryption keys are derived from your credentials on your device using PBKDF2. Keys are never transmitted to our servers.
Hardened Infrastructure
Encryption at rest and in transit, row-level database access control, and rate limiting across every entry point. We are not yet SOC 2 certified.
Penetration Testing
We commission independent third-party penetration tests quarterly. Results are reviewed by our security team and remediated within 30 days.
Biometric Authentication
Leverage Face ID and fingerprint authentication on mobile devices for quick, secure access without compromising security.
Bug Bounty Program
We maintain an active bug bounty program. Security researchers who responsibly disclose vulnerabilities receive recognition and rewards.
GDPR & CCPA Compliant
Full compliance with GDPR (EU), CCPA (California), PIPEDA (Canada), and other major data protection regulations worldwide.
Security Technology Stack
The specific technologies protecting every layer of deepcloud.
All data in transit is encrypted with TLS 1.3 — the latest and most secure transport protocol.
Files at rest are encrypted with AES-256-GCM. Each file uses a unique encryption key.
Multi-factor authentication with TOTP authenticator apps or email/SMS OTP codes.
Account credentials are hashed with Argon2id — the winner of the Password Hashing Competition.
Session tokens are stored in HttpOnly, SameSite=Strict, Secure cookies — immune to XSS.
Authentication and the database run on Supabase with row-level security. File objects are stored in Cloudflare R2 and served through Cloudflare's network.
Found a Security Issue?
We take security reports seriously. Responsible disclosure is rewarded. Please do not publicly disclose vulnerabilities before we've had a chance to address them.
[email protected]