Overview

The SingleStore Security & Trust Center is a comprehensive framework designed to ensure the security, privacy, and compliance of data within SingleStore's cloud-native, distributed database platform. Recognizing the critical importance of data integrity, SingleStore integrates security measures throughout its infrastructure, from development to deployment, to safeguard customer data across various environments, including Amazon Web Services, Microsoft Azure, and Google Cloud Platform.

Key aspects of the Security & Trust Center include:

• Data Encryption: Utilizing industry-standard encryption protocols to protect data both at rest and in transit.
• Access Controls: Implementing robust authentication mechanisms and role-based access controls to restrict unauthorized access.
• Compliance Certifications: Achieving certifications such as ISO 27001 and SOC 2 Type 2 to meet regulatory requirements.
• Privacy Transparency: Providing clear information on data storage practices and adherence to privacy policies.

Features and Capabilities

• Data Encryption:
  • TLS 1.2 encryption for secure data transmission.
  • AES 256-bit encryption for data at rest, covering various cloud storage services.
  • Support for customer-managed encryption keys via cloud Key Management Services.
• Access Controls:
  • Role-Based Access Control (RBAC) to define user permissions.
  • Row-Level Security (RLS) for fine-grained data access management.
  • Account security features including password policies and account lockout mechanisms.
• Compliance and Certifications:
  • ISO 27001 certification for information security management.
  • SOC 2 Type 2 compliance for operational security.
  • Adherence to privacy regulations through approved standard contractual clauses.
• Privacy and Transparency:
  • Clear communication of data storage locations and practices.
  • Commitment to transparency in data handling and privacy policies.
• Reliability and Availability:
  • Up to 99.99% uptime SLA for SingleStore Helios deployments.
  • Zero downtime architecture to ensure continuous data availability.