Commitment and responsibility
What we commit to, and what ThingsBoard handles in each deployment model.
Our commitments
-
Documents under NDA
Within two business days after we sign a mutual NDA. -
Security questionnaires
We give you the information you need to complete your security questionnaire. -
Support
- ThingsBoard Cloud: community support on GitHub for Free and Prototype; help desk on Pilot; priority help desk on Startup and Business. Replies within 24 hours, 8:00–20:00 EET, Monday to Friday.
- Private Cloud: Support Portal on every plan; priority channel on Growth, Scale and Enterprise; engineering support and a dedicated customer success engineer on Enterprise.
- On-premises: community support on Free; help desk on Pilot (replies within 36 hours); priority help desk on Startup (replies within 36 hours) and Business (within 12 hours). Perpetual licenses include the first year of support.
-
Uptime: Private Cloud
Contractual SLA: 99.9% on Launch and Growth, 99.95% on Scale and Enterprise, and a custom SLA on Enterprise on request. -
Leaving Private Cloud
A full encrypted export of your data. You have 60 days to download it; then we permanently delete all backups and cluster data.
What ThingsBoard handles
| Area | ThingsBoard Cloud | Private Cloud | On-premises |
|---|---|---|---|
| Product | |||
| Secure development, testing and product fixes , Product | ThingsBoard Cloud ✓ ThingsBoard | Private Cloud ✓ ThingsBoard | On-premises ✓ ThingsBoard |
| Security features: 2FA, SSO, RBAC, audit log, secrets storage , Product | ThingsBoard Cloud Built in, managed by you | Private Cloud Built in, managed by you | On-premises Built in, managed by you |
| Hosting and infrastructure | |||
| Data center security, through our cloud providers , Hosting and infrastructure | ThingsBoard Cloud ✓ ThingsBoard | Private Cloud ✓ ThingsBoard | On-premises You |
| Hosting region , Hosting and infrastructure | ThingsBoard Cloud ✓ ThingsBoard — North America or EU | Private Cloud ✓ ThingsBoard — The region you need | On-premises You |
| Network perimeter, firewall, DDoS protection , Hosting and infrastructure | ThingsBoard Cloud ✓ ThingsBoard | Private Cloud ✓ ThingsBoard | On-premises You |
| Capacity, scaling and high availability , Hosting and infrastructure | ThingsBoard Cloud ✓ ThingsBoard | Private Cloud ✓ ThingsBoard | On-premises You |
| Platform operations | |||
| OS, Kubernetes and database patching , Platform operations | ThingsBoard Cloud ✓ ThingsBoard | Private Cloud ✓ ThingsBoard | On-premises You |
| Platform upgrades and security patches , Platform operations | ThingsBoard Cloud ✓ ThingsBoard | Private Cloud ✓ ThingsBoard | On-premises You |
| TLS certificates on platform endpoints , Platform operations | ThingsBoard Cloud ✓ ThingsBoard | Private Cloud ✓ ThingsBoard | On-premises You |
| Platform sysadmin account and platform-wide security settings , Platform operations | ThingsBoard Cloud ✓ ThingsBoard | Private Cloud ✓ ThingsBoard | On-premises You |
| Hardening the deployment , Platform operations | ThingsBoard Cloud ✓ ThingsBoard | Private Cloud ✓ ThingsBoard | On-premises You |
| Continuity | |||
| Backups and restore , Continuity | ThingsBoard Cloud ✓ ThingsBoard | Private Cloud ✓ ThingsBoard | On-premises You |
| Disaster recovery and business continuity , Continuity | ThingsBoard Cloud ✓ ThingsBoard | Private Cloud ✓ ThingsBoard | On-premises You |
| Infrastructure monitoring and alerting , Continuity | ThingsBoard Cloud ✓ ThingsBoard | Private Cloud ✓ ThingsBoard | On-premises You |
ThingsBoard Edge, IoT Gateway, TBMQ, Trendz and the mobile apps split responsibility differently. Ask our security team for a breakdown by product.
Built for you to configure
We built these controls into the platform, so you can tune security to your own needs in every deployment instead of building it from scratch:
- Manage users, roles and access reviews in your tenant
- Turn on 2FA and single sign-on
- Issue API keys and integration credentials
- Choose device credentials, provisioning and transport security
- Decide what rule chains and integrations send to third parties
- Control which dashboards are public
- Choose which data you upload and how you classify it
- Set data retention within your plan limits
- Export your data at any time
- Follow activity in the audit log
- Meet your industry's requirements, such as HIPAA or 21 CFR Part 11
Where to find them
Read next
Can’t find what you need?
Our security team answers questions, shares documents under NDA and handles vulnerability reports.
-
Contact our security team
Questions, questionnaires and data requests.
-
Get documents
Certificates and policies; request the NDA ones from the library.
-
Report a vulnerability
Tell us privately. We reply within three business days.