Back to Knowledge Base
Data Encryption
How we protect your data at rest and in transit using industry-standard cryptography.
Security is built into the foundation of TARE. We assume a "Zero Trust" architecture to ensure your data remains confidential and integral at all times.
Encryption at Rest
- • Database: All volumes encrypted with AES-256.
- • Backups: Encrypted before leaving the private network.
- • Files: Documents stored in S3/R2 are server-side encrypted.
Encryption in Transit
- • TLS 1.3: Enforced for all web and API traffic.
- • HSTS: Strict Transport Security prevents downgrade attacks.
- • Perfect Forward Secrecy: Ensures past sessions remain secure.
// Example Cipher Suite
TLS_AES_256_GCM_SHA384
ECDHE-RSA-AES256-GCM-SHA384