Data protection
Objects are encrypted with AES-256 at rest and protected by TLS in transit. Integrity checks run throughout the storage lifecycle.
- Encryption at rest
- Encrypted transport
- Integrity verification
STRG SECURITY
How STRG protects your data
STRG encrypts objects with AES-256 at rest and TLS in transit. Scoped credentials control access to your buckets.
Security posture Active
Protected by defaultControls apply across the storage lifecycle
Encryption at restAES-256
Data in transitTLS
Object LockAvailable
Integrity checksContinuous
Secure defaults. Customer-controlled access.
11 ninesDesigned annual durability
AES-256Encryption at rest
TLSEncrypted in transit
Region controlChoose where data lives
Security controls
Identity & access
Use scoped access keys to limit which buckets and operations an application can access.
- Scoped credentials
- Granular permissions
- Logged admin access
Infrastructure
Storage nodes are isolated by role, hardened and operated through controlled deployment processes.
- Layered isolation
- Controlled changes
- Redundant systems
Monitoring & response
Infrastructure and service activity are continuously monitored for anomalies and operational risk.
- Continuous monitoring
- Auditable events
- Incident procedures
Data path
How STRG handles a request
Requests are authenticated before they reach storage. Data stays encrypted in transit, then is encrypted and distributed across redundant storage infrastructure.
- Credentials are evaluated at the service edge
- Checksums verify object integrity
- Replication can extend resilience across regions
01 / CLIENTTLS request
02 / EDGEAuthenticate
03 / REGIONEncrypt & store
Encrypted objectRedundant shards + integrity metadata
Operational resilience
Storage resilience
Redundant storage, repair processes and controlled operations reduce single points of failure. For additional geographic resilience, customers can use cross-region replication.
99.999999999%Designed annual object durability
- Redundant object storage
- Continuous integrity verification
- Failure-domain isolation
- Optional immutable Object Lock
Security and privacy documents
Review data residency, service levels and processing terms.