Snapshot 223250

Document
Security page
URL
https://docs.anyshift.io/pages/privacy_security/faq
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
130462 bytes
SHA-256 (raw)
7bf6e3c0c42460b201dc84847cbd21e1916d498c0137e0b598e042525fece606
SHA-256 (normalized text)
cc8271854e5ee480fc6211df44dfa0f76dabd3447d903985f033ad2e3af3ed02

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Skip to main content
​
Does Anyshift have access to my infrastructure data?
Anyshift requires limited, permission-controlled access to your infrastructure to provide insights. We do not use your data to train AI models. For more details about our AI providers and data handling practices, see our External Providers page.
​
What cloud access permissions does Anyshift require?
Anyshift requires read-only access to your cloud resources. We recommend using role-based access with least privilege. For Kubernetes, we use a lightweight agent with minimal permissions. For GitHub/GitLab, you can specify which repositories Anyshift can access. Policies can be even more fine-grained than read-only. For example, you can grant permissions that only allow listing of instances, as described in our AWS integration documentation.
​
Does Anyshift have access to the secrets in my Terraform states?
Secrets in your Terraform state files can be anonymized before Anyshift ingests them. With our optional anonymization pipeline, a Lambda function you control removes sensitive data, ensuring secrets are never exposed to Anyshift. The Lambda code is available for audit.
​
How does Anyshift isolate customer data?
We use strict data isolation, strong access controls, and encryption in transit and at rest to ensure no customer can access another customer’s data.
​
How does Anyshift handle AI and data sovereignty?
We have agreements with our AI providers to prevent your data from being used for model training. For strict data residency needs, we offer deployment options that keep sensitive data within your infrastructure. Learn more about our specific AI provider agreements and zero data retention policies on our External Providers page.
​
What are Anyshift’s outbound IP addresses?
We publish the list of IP addresses used by Anyshift to connect to your infrastructure. If your organization uses firewall rules or IP allowlists, see our Network Requirements page for the full list and a downloadable JSON file.
​
Does Anyshift support on-premises deployment?
Yes, for customers with strict data residency or IP protection requirements, we offer deployment options including agents that run in your VPC to preserve application code confidentiality. These options are available as part of our Enterprise plan. For more details, contact us at contact@anyshift.io.
​
Is Anyshift SOC 2 compliant?
Yes, Anyshift is SOC 2 compliant, ensuring the highest standards of security and data protection. For comprehensive information about our security standards and compliance certifications, visit our Compliance & Certifications page.
​
I have more questions about security.
Security Questions
Schedule a call to discuss security
Trust Portal
Visit our trust portal for detailed security information
​
Cookie Policy
Our website uses cookies to enhance your experience and provide analytics:
Essential cookies for core functionality
Analytics cookies to improve our service
Full cookie policy available at anyshift.io/cookies