Skip to content

Cookie preferences

We use cookies for our own analytics, to see how our campaigns perform and, if you allow it, to load content from other services such as the Google site search. We never sell your data. Necessary cookies keep the site working and cannot be switched off. See our Cookie Policy for details and our Privacy Policy for how we handle personal data.

Security, load balancing and remembering your cookie choice.

Show us which pages people read, how they find the site and where they get stuck, so we can improve it (Google Analytics, Microsoft Clarity).

Show us which of our ad campaigns bring visitors to the site and remember the campaign or partner link you arrived from (Google Ads, LinkedIn, Meta, partner program). We do not use these cookies to build advertising profiles.

Load the site search from Google when you use it. Google sets its own cookies and shows ads in the search results.
© 2026 The ThingsBoard Authors
22.5k Try for free

ThingsBoard Cloud

Choose your data region

Your data stays in the region you choose, for residency and compliance. No credit card required.

North America Data stored in North America Europe Data stored in the European Union

Rather run it yourself? Install on your own servers

ThingsBoard Cloud and Private Cloud

In both models, ThingsBoard runs the platform and the infrastructure under it. ThingsBoard Cloud is multi-tenant; Private Cloud is a dedicated single-tenant instance in the environment and region you choose. In both cases, you focus on your solution, and we take care of running it. Our certifications and everything under Product security apply to both.

ThingsBoard Cloud Private Cloud
Operations
Who runs it , Operations ThingsBoard Cloud ThingsBoard: infrastructure, patching, upgrades, monitoring and backups. Private Cloud ThingsBoard, with upgrades in a window agreed with you.
Hosting , Operations ThingsBoard Cloud AWS (EKS) in two independent regions: North America (thingsboard.cloud) and EU (eu.thingsboard.cloud). Private Cloud AWS by default; Azure or GCP on request.
High availability , Operations ThingsBoard Cloud Deployed across several availability zones: PostgreSQL in a multi-zone setup, Cassandra and Kafka with replication factor 3. Private Cloud Application high availability on Scale and Enterprise; Launch and Growth run one application instance. Databases are replicated across availability zones on every plan.
Uptime , Operations ThingsBoard Cloud — Private Cloud Contractual SLA: 99.9% on Launch and Growth, 99.95% on Scale and Enterprise, and a custom SLA on Enterprise on request. Monitored 24×7.
Infrastructure access , Operations ThingsBoard Cloud Authorized ThingsBoard engineers only, with regular audits and monitoring. They work with your tenant's data only to handle a request you raised; access is role-based and logged. Private Cloud Authorized ThingsBoard engineers only, with regular audits and monitoring. They work with your tenant's data only to handle a request you raised; access is role-based and logged. You don't get a sysadmin account by default; read-only metrics and Kubernetes dashboards are available under NDA.
Data
Data residency , Data ThingsBoard Cloud North America or EU; data never moves between regions. Private Cloud North America, EU or APAC, chosen during onboarding.
Isolation , Data ThingsBoard Cloud Every request is confined to its own tenant, and customers and entity groups narrow access further. Private Cloud A dedicated single-tenant cluster.
Backups , Data ThingsBoard Cloud Daily, with point-in-time recovery. Private Cloud Nightly snapshots in a separate cloud region, kept 7 days by default (longer on Enterprise).
Data retention (TTL) , Data ThingsBoard Cloud 30 to 365 days, depending on plan. Private Cloud 365 days by default; you can change it.
Leaving , Data ThingsBoard Cloud You export your data through the REST API; we delete your tenant after cancellation. Private Cloud We prepare a full encrypted PostgreSQL/Cassandra dump. You have 60 days to download it; then we permanently delete all backups and cluster data.
Security
Encryption in transit , Security ThingsBoard Cloud TLS preconfigured: HTTPS on 443, MQTTS on 8883. Private Cloud TLS preconfigured: HTTPS on 443, MQTTS on 8883.
Network protection , Security ThingsBoard Cloud DNS by Cloudflare; rate limits set by plan. Private Cloud Rate limits of 50 requests per second and 500 per minute per source IP for HTTP traffic (REST, WebSocket, web UI). A dedicated VPN tunnel to your systems, depending on plan.
Data center certifications , Security ThingsBoard Cloud AWS: ISO 27001, PCI DSS, SOC 2. Private Cloud ISO 27001, PCI DSS and SOC 2 certified data centers.

Documents

ThingsBoard Cloud

Private Cloud

Same set as ThingsBoard Cloud; only the differences are listed.

Read next

Can’t find what you need?

Our security team answers questions, shares documents under NDA and handles vulnerability reports.