Basaltic
Pricing
Sign in
Get started
Security

Security at every layer

From hardware to support, we invest in controls that protect your data and help you meet regulatory requirements.

Talk to a specialistSee documentation

Encryption controls

Isolated network

São Paulo region

Audit records

Fundamentals

Infrastructure secure by design

Security built into every component of our platform.

Secure hardware

Host identity and attestation backed by TPM hardware.

Isolated network

VPC isolation, route tables, and security groups let you control resource connectivity.

Service identities

Service accounts and roles give applications access through IAM policies.

Audit records

Inspect recorded platform actions to investigate access and changes to your resources.

Compliance

Compliance and governance

Review service documentation and your organization’s requirements when designing data controls.

LGPD

Our privacy policy describes how personal data is processed and how to exercise your rights.

Data in Brazil

Compute and storage resources are provisioned in the São Paulo region. This does not imply that every support or account-data processor is in Brazil.

Data processing questions

Contact us to confirm contractual and data-processing requirements for your use case.

Audits

Use account audit records and IAM policies to support your internal reviews.

TLS for public API connections

Encrypted secrets

Customer-managed KMS keys for supported services

Configurable object-storage server-side encryption

Account-scoped IAM permissions

Account audit records

Data Protection

Your data protected

Encryption capabilities vary by service. Configure the supported controls for your data and use IAM to restrict access.

Access Control

Secure, auditable access

Granular control over who can reach your resources.

Granular IAM

Role-based access control with customizable policies.

Optional MFA

Enable two-factor authentication on your user account for additional sign-in protection.

Secure API keys

Manage service-account access keys and use temporary role sessions for workloads. Revoke keys that are no longer needed.

Incident Response

Reporting and communication

Responsible disclosure

A dedicated channel for reporting security vulnerabilities.

Support tickets

Open a support ticket with the affected resources and relevant details for investigation.

Transparent communication

Check the status page for published service incidents and updates.

Contact

Talk to our security team

Report a suspected vulnerability or ask about the platform’s security controls.

Questions about security controls

Security vulnerability reports

Responsible disclosure contact

Start with R$ 100 in credits

Eligible new accounts receive credits after activation. Check the amount and expiry in Billing.

Create a free account