Encrypted in transit and at rest: what that means here

"Encrypted" can mean many things. Our Security & Compliance page now says exactly what it means on Data Arcade and Data Circuit, and every statement there is true of the live systems.

In transit

Every connection to Data Arcade uses HTTPS with TLS 1.2 or higher, and TLS 1.3 where your browser supports it. Older versions, TLS 1.0 and 1.1, are refused, and browsers are told to use HTTPS only.

At rest

Your data is stored in Microsoft Azure and encrypted at rest with AES-256, including database backups.

On your device

Information your browser keeps for convenience, such as a copy of your profile, your cart, drafts and quotes, stays on your device. It is cleared when you sign out or another account signs in on that browser.

Keys and secrets

Application secrets, and the keys that protect your sign-in, are kept in Azure Key Vault rather than in the application's own settings.

Who can see your data

Staff access is least-privilege, individually attributed, and protected by multi-factor authentication. Payments for Data Circuit plans run through Stripe, so card details never reach our servers.

How we keep the page honest

We avoid vague security slogans. We publish specific statements instead, and we check them against the live configuration before we change what the page says. Our controls are SOC 2-aligned.

What you can do

• Describe your work in support requests and assessments, but leave out passwords and other secrets.
• Use a strong, unique password for your account.
• Review what we store, download your data, or delete your account from Account, then Privacy.

Read the full Security & Compliance page and our Privacy Policy.