How we protect your security data
You trust TrustDesk with the documents that describe your security. Here is how we look after them.
Hosted in the EU
TrustDesk runs on servers in the EU, and your data is stored and processed there. We use no third-party analytics or advertising trackers.
Encryption
All traffic uses HTTPS with automatically renewed certificates. Nightly database backups are encrypted before they are stored off-site.
Isolation between organizations
Every query is scoped to your organization, and an automated test fails if a new table is added without that protection.
Sign-in protection
Optional two-factor authentication with an authenticator app and backup codes, rate-limited sign-in, and roles for owners, admins, members and viewers.
Uploads are scanned
Every uploaded file is checked for viruses before anyone can download it, and only common document and image formats are accepted.
Audit log and your data
Sign-ins, changes and downloads are recorded in an audit log owners and admins can read. You can export everything or delete your account at any time.
Questions from your own security team?
We're happy to answer them, in your questionnaire format if you like.