Snapshot 221823

Document
Security page
URL
https://skyvia.com/security
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
117543 bytes
SHA-256 (raw)
19e4f7b7119276fd28e119bb025aeda9f4ab9dbe3ec5cbb0843f999439a91633
SHA-256 (normalized text)
7d202a5ab18b1bb8f429e8bf8e7c45547f12262d71090015d74a9d4851ade9ea

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Home
Security
Request a DemoRequest Security Documentation
Trusted by data teams worldwide
SOC 2 Type 2
Skyvia has completed a SOC 2 Type 2 examination covering controls relevant to security, availability, and confidentiality.
Encryption in Transit and at Rest
Data transmitted to and from Skyvia is protected using TLS. Private data stored by Skyvia is encrypted using AES-256.
GDPR and Data Protection
Skyvia supports customers’ GDPR obligations through a Data Processing Agreement and contractual safeguards for personal data.
Protect every Skyvia account with two-factor authentication, account-wide MFA requirements, and sign-in allowed only from trusted IP addresses.
Two-factor authentication
Account-level MFA requirements
Account-level IP filtering
Sign-in with Google and Salesforce
Decide who can see and change what. Assign standard or custom roles in each workspace and limit endpoint access to specific users and IP addresses.
Standard workspace roles
Custom workspace roles
Workspace-level access management
Endpoint-specific users
Endpoint-specific IP restrictions
Monitor your data operations with activity logs and execution history to review results and troubleshoot issues.
Run history
Success and error logs
Skyvia Connect endpoint activity logs
Audit logs available upon request
Skyvia Cloud
Run your workflows in Skyvia’s fully managed cloud environment hosted on Microsoft Azure in the United States. Skyvia manages the processing infrastructure, platform operations, monitoring, and maintenance. Customer-selectable regions and cloud providers are not currently available.
Secure Connections
Connect supported applications via OAuth without sharing application passwords with Skyvia. Secure database connections using SSL or SSH where supported.
Skyvia Agent
Connect databases located inside private networks to Skyvia through an outbound HTTPS connection. Skyvia Agent does not require exposing database ports to the public Internet.
Connect Hybrid Deployment
Host Skyvia Connect SQL and OData endpoints in your infrastructure, keeping source-data traffic within your environment. Endpoint configuration is managed in Skyvia, and activity logs are sent to Skyvia for monitoring.
Enterprise Dedicated VM
Run Data Integration workloads on a VM dedicated to your organization. Processing compute is separate from the shared execution environment, providing dedicated capacity for high-volume and business-critical workloads.
How data is processed
Skyvia transfers data from the source system to the target system according to the integration workflow configured by the user. During an operation, Skyvia may temporarily cache portions of the processed data. This cache exists only while the operation is running and is deleted immediately after it finishes.
What Skyvia retains
Skyvia stores integration run history and operational logs. Per-record error logs may contain portions of the processed data. For certain integration types and data sources, Skyvia may also store per-record logs for successfully processed records.
Downloadable export files are retained for seven days and can be deleted earlier by the user. Users can also manually clear integration run history and associated per-record logs for a selected period.
How data is processed
Skyvia Automation executes the triggers, actions, and workflow logic configured by the user across connected systems.
What Skyvia retains
Skyvia stores automation execution history and detailed execution logs for monitoring and troubleshooting. Execution details may include input and output data values processed by Trigger, Action, and Set Variable components.
Automation logs are retained for seven days on the Free plan and 60 days on the Standard plan.
How data is processed
Skyvia creates snapshots of the data selected in the backup configuration.
What Skyvia retains
Backup snapshots are encrypted and stored in Azure geo-redundant storage. Customers can manually delete snapshots or configure Skyvia to automatically remove the oldest snapshots when the storage limit included in their subscription is reached. All remaining backup snapshots are deleted when the Skyvia account is deleted.
How data is processed
Queries are executed against the connected data source.
What Skyvia retains
Skyvia may temporarily cache portions of the queried data while the operation is running. This temporary cache is deleted immediately after the operation finishes.
How data is processed
Skyvia Connect provides live API access to the objects and operations exposed through the configured endpoint.
What Skyvia retains
Skyvia stores the endpoint configuration and activity logs. Activity logs include the request date and time, execution status, transferred data volume, HTTP method, remote IP address, and requested URL. Activity logs are retained for as long as the Skyvia account remains active and are deleted together with the account.
Among the results of implementing, Skyvia helped us remove redundancies in the processes, reduce data gaps, and thus save overall cost.
Platform Architecture
See how Skyvia’s cloud architecture helps keep your data secure.
Privacy Policy
Learn how Skyvia collects, uses, transfers, and protects personal information.
Account Security
Explore account security settings for IP filtering and two-factor authentication.
Does Skyvia store customer data?
What Skyvia retains depends on the product and workflow being used. See the “Understand how Skyvia handles your data” section for product-specific information.
How does Skyvia protect connection credentials?
Skyvia uses OAuth for supported applications. OAuth tokens, database credentials, and other stored connection parameters are encrypted.
Can Skyvia employees access customer data?
Internal access is restricted to authorized personnel with a legitimate business need and is governed by role-based and least-privilege controls.
Where is Skyvia hosted?
Skyvia’s managed cloud environment is hosted on Microsoft Azure in the United States. Skyvia does not currently provide customer-selectable hosting regions or cloud providers.
Does Skyvia support two-factor authentication?
Yes. Users can enable two-factor authentication, and account administrators can require account users to use MFA.
Can customers restrict access by IP address?
Yes. Skyvia supports account-level IP filtering. Skyvia Connect endpoints can also have their own IP restrictions.
What is the difference between Skyvia Agent and Connect Hybrid Deployment?
Skyvia Agent securely connects a database inside a private network to the Skyvia cloud through an outbound HTTPS connection. Connect Hybrid Deployment runs the SQL or OData endpoint runtime inside the customer’s infrastructure. It is currently available only for Skyvia Connect.
What security benefits does an Enterprise Dedicated VM provide?
Enterprise Dedicated VM provides processing compute dedicated to one organization and separates its Data Integration workloads from Skyvia’s shared execution environment.
Can customers access audit logs?
Skyvia collects audit information, but a customer-facing audit log interface is not currently available. Audit information may be provided upon request.
Can customers configure custom log-retention periods?
Custom management of execution-log retention is not currently available.
How can I request the SOC 2 Type 2 report?
The full Skyvia SOC 2 Type 2 report is available to customers and prospective customers upon request and after an NDA is signed. Request the SOC 2 Type 2 Report
What happens to data when an account is deleted?
All customer data is then deleted from all Skyvia resources permanently.
Need more detail for your security review?
Talk with our team about your architecture, connectivity, deployment, and compliance requirements.
Send your security request