Security

Compute in homes,
secured like a data centre

Putting servers in domestic premises raises fair questions. This is how we answer them: hardware-backed trust on every appliance, encryption in transit and at rest, tenant isolation that holds even against us, and independent testing to prove it.

Controls and compliance

Controls and compliance

Certification

Cyber Essentials Plus, verified by a third party

Independent testing

Third-party penetration testing and independent physical device testing. We also welcome client-initiated testing

Encryption at rest

LUKS2 AES-256-XTS with TPM-sealed keys

Encryption in transit

WireGuard — ChaCha20-Poly1305 and Curve25519

Patch management

Centrally managed, with transactional updates and rollback

Threat detection

Real-time detection combining USB fingerprinting and chassis intrusion, which disconnects a compromised unit

Monitoring and audit

Centralised logging with alerting, full event logging, and retained scan history

Access control

Public-key SSH only, two-factor authentication, all administrative access VPN-gated

On the roadmap

ISO 27001, AMD SEV confidential computing, container image signing and SBOMs

Going deeper

The full detail is in our docs

Our public security documentation covers the architecture, the isolation model and the controls in more depth. The complete security policy — written for security teams reviewing us as a supplier — is available under NDA on request.

Talk to us

Send us your security questionnaire

We would rather answer the hard questions early. Talk to our sales team, or email security@heata.co.