Encryption in transit
All communications between your information system and Astry are encapsulated in a TLS (HTTPS) 1.2 or 1.3 channel, and are therefore encrypted.
Encryption at rest
All information stored in our databases is encrypted using the standard AES-256 algorithms.
Note: User passwords (for so-called local accounts) are never stored on our servers. We use the SRP (Secure Remote Password) protocol to store verifiers (encrypted, in the same way as other data, using the standard AES-256 algorithms).
Special case of the vault
All data stored in the Astry vault is encrypted end-to-end. This means the data is never seen in clear text (neither in transit nor in storage), whether by our teams or by our hosting provider. This relies on cryptographic mechanisms that partly take place in the user's browser (details are documented in this section).