Database Security
Thalassa Cloud’s Database as a Service (DBaaS) provides comprehensive security features to protect your data and ensure compliance with industry standards. Our security architecture is designed to provide defense in depth, protecting your databases at multiple layers.
Security Overview
Our DBaaS security model is built around four core principles:
- Data Protection: Encryption at rest and in transit. Replication and connections all utilize TLS.
- Access Control: Role-based access control and authentication
- Network Security: Network isolation and traffic control
- Compliance: Meeting industry security standards
Encryption
Encryption at Rest
All data stored in our database clusters is encrypted at rest using industry-standard encryption algorithms:
- Storage encryption: All database files stored are encrypted.
- Key management: Encryption keys are managed securely by our platform
- Transparent encryption: Encryption is transparent to your applications
Encryption in Transit
All connections to your database clusters are encrypted using SSL/TLS:
- SSL/TLS 1.2+: All client connections use modern TLS protocols
- Connection verification: Clients can verify server identity