Snapshot 165385

Document
Security page
URL
https://www.pinecone.io/security/
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
198261 bytes
SHA-256 (raw)
6211bdd3c1cf58b650945fbd0d76b1e68c3d723769e60dbb457972af3c158f42
SHA-256 (normalized text)
2ffe2cfdc1a1e8c9c96c3044568647bdbad0328824691766f332aab9413903c8

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Introducing pg_pinecone: Open-Source Search for Your Postgres Data - Read the announcement
Security
Secure by design
Enterprise-grade security and operational controls powering mission-critical apps for 5000+ engineering teams.
Contact salesView security center
Compliance
Request BAA
Data security
Encryption
Secure your data at rest and in transit with enterprise-grade protection.
Audit logs
Monitor system events for operational visibility and security compliance.
Private endpoints
Securely connect to Pinecone without exposing traffic to the public internet.
Customer Managed Encryption Keys
Encrypt data using your own cloud provider KMS for enhanced control.
Authorization and authentication
API key roles
Granular access control that grants each application only the permissions it needs.
RBAC
Assign roles and permissions to ensure secure, role-based access to Pinecone.
SSO (SAML 2.0)
Simplify and secure user authentication with seamless single sign-on.
Coming Soon
MFA
Add an extra layer of security with two-step verification for your Pinecone account.
Reliability and availability
99.95% uptime SLA
Guaranteed critical reliability with a 99.95% uptime SLA.
Backup and restore
Guaranteed critical reliability with a 99.95% uptime SLA.
Deletion protection
Prevent accidental deletion of an index and its data with an additional layer of verification.
Multi-availability zone resilience
Deployments automatically span multiple availability zones, ensuring hands-off resilience.
FAQs
How does Pinecone protect my data?
Pinecone uses encryption at rest and in transit, with AES-256 encryption standard. Your data remains isolated and protected, and is only used for servicing API calls.
What compliance certifications does Pinecone have?
Pinecone is SOC2 Type II certified, HIPAA compliant (with BAA available upon request), and GDPR-ready.
How does authentication work with Pinecone?
Pinecone uses API keys for authentication across environments. Each project has one or more API keys with configurable permission roles for both control plane and data plane access.
Can I use Single Sign-On (SSO) with Pinecone?
Yes, organizations can configure SSO to manage team access through their identity management solution.
What encryption protocols does Pinecone use?
Pinecone uses TLS 1.2 protocol with AES-256 encryption for data in transit through HTTPS and gRPC connections. For stored data, AES-256 encryption is used.
How can I control access to my Pinecone resources?
Pinecone provides role-based access controls (RBAC) at both organization and project levels. You can manage API key permissions and assign specific roles to control who can access and modify your data.