Trust Center: Security & Compliance
Enterprise-grade security, compliance, and transparency. Complete audit trails, immutable backups, and real-time threat detection built into every ShadowCradle appliance.
Six Pillars of Trust
Encryption at Rest & in Transit
AES-256-GCM block encryption. TLS 1.3 for all replication and cloud management traffic.
Immutable Backups & Sentinel Detection
A write-once retention window locks a restore point against changes. Ransomware sentinel files in 3 locations catches encryption attempts before they spread.
Secure Key Management
No hardcoded credentials. Optional customer-managed encryption keys.
Air-Gapped & Offline Backup
An Airgap licence tier for sites with no internet. Offline evidence and reports. Move backups between sites with USB replication. Cold storage archive to S3-compatible systems.
Continuous Monitoring & Alerting
Integrity checks and alerts. Anomaly detection triggers on suspicious backup patterns or failed verifications.
Complete Audit Trail
Every backup, restore, and admin action logged with timestamp, user, and IP. Tamper-proof log storage. Reports to support HIPAA, SOC 2 and GDPR work. Not a certification.
Compliance & Certifications
Availability & Reliability
Cloud Service Availability
Appliances keep protecting and restoring locally when the cloud portal is unreachable.
Disaster Recovery
Automated failover and multi-region replication ensure your backups are always accessible.
Incident Response
24/7 security team monitoring and rapid response protocol for any potential incidents.
Data Handling & Privacy
Data Residency
Choose where your backup data is stored. Support for US, EU, and Asia-Pacific regions with local data sovereignty.
Data Retention Policies
Granular control over backup retention. Automatic deletion policies. Full audit trail of all data lifecycle events.
Third-Party Processors
Complete transparency on all sub-processors. Published list with Data Processing Agreements.
Testing & Verification
Penetration Testing
Planned annual third-party penetration tests to validate security posture against real-world attack vectors.
Vulnerability Scanning
Planned continuous vulnerability scanning and patching program. Security researchers welcome to report findings.
Compliance Certifications
We are currently working on SOC 1 and SOC 2 compliance. No report has been issued yet; we will say so here when one is. The others are planned. ShadowCradle can produce reports to support your own HIPAA, SOC 2 and GDPR work. Ask us about private audits.
Security & Compliance Documentation
Inside the Appliance
Screens from the live demo with sample data.
