Architecture & Tenant Isolation
- Dedicated Tenant Data Isolation: Every customer workspace operates in a logically isolated tenancy with dedicated schema encryption keys.
- Encryption Standards:
- Data at Rest: AES-256 encryption using customer-managed or AWS KMS / GCP Cloud KMS keys.
- Data in Transit: TLS 1.3 enforced across all external and internal API communication.
- High Availability: Multi-AZ redundant deployment with 99.9% uptime SLA.
- Compliance: SOC 2 Type II, ISO 27001, and GDPR compliant.
Getting Started
- Sign Up or Accept Invitation: Navigate to your dedicated organization URL (e.g.,
https://<company>.suite.snapsec.co). - Configure Authentication: Connect your corporate Identity Provider via SAML 2.0 or OpenID Connect (OIDC).
- Allowlist Outbound Scanner IPs: If scanning private endpoints or internal assets exposed via corporate firewalls, allowlist Snapsec’s dedicated scanner egress IP pool:
- Provision Team Members: Assign roles (Admin, Analyst, DevSecOps) to ensure proper access boundaries.
Automated Backups & Disaster Recovery
- Continuous database write-ahead logging (WAL) with point-in-time recovery (PITR) up to 35 days.
- Encrypted cross-region snapshot replication.
- Zero maintenance downtime: all platform updates are deployed via rolling blue-green releases.
Next Steps
Quickstart: First 30 Minutes
Begin scanning and asset discovery on your cloud workspace.