Skip to content

Cookie preferences

We use cookies for our own analytics, to see how our campaigns perform and, if you allow it, to load content from other services such as the Google site search. We never sell your data. Necessary cookies keep the site working and cannot be switched off. See our Cookie Policy for details and our Privacy Policy for how we handle personal data.

Security, load balancing and remembering your cookie choice.

Show us which pages people read, how they find the site and where they get stuck, so we can improve it (Google Analytics, Microsoft Clarity).

Show us which of our ad campaigns bring visitors to the site and remember the campaign or partner link you arrived from (Google Ads, LinkedIn, Meta, partner program). We do not use these cookies to build advertising profiles.

Load the site search from Google when you use it. Google sets its own cookies and shows ads in the search results.
© 2026 The ThingsBoard Authors
22.5k Try for free

ThingsBoard Cloud

Choose your data region

Your data stays in the region you choose, for residency and compliance. No credit card required.

North America Data stored in North America Europe Data stored in the European Union

Rather run it yourself? Install on your own servers

Data security

What happens to the data your devices send to the platform, from the moment it arrives until you delete it.

  • Data ownership

    Customer data belongs to the customer. We process it on your behalf under the DPA and don't use it to train or improve ThingsBoard's own AI models.

  • Tenant isolation

    • ThingsBoard Cloud: every request is confined to its own tenant; customers and entity groups narrow access further.
    • Private Cloud: a dedicated single-tenant cluster.
    • On-premises: your own installation.

  • Encryption in transit

    Configurable
    Users and devices connect over TLS: HTTPS on 443, MQTTS on 8883, DTLS for CoAP and LwM2M.

  • Secrets and passwords

    Stored secrets are encrypted with AES-256, and user passwords are stored as BCrypt hashes in every deployment.

  • Storage region

    • ThingsBoard Cloud: North America or EU; data never moves between regions.
    • Private Cloud: North America, EU or APAC.
    • On-premises: wherever you deploy.

  • Backups

    • ThingsBoard Cloud: daily, with point-in-time recovery.
    • Private Cloud: nightly snapshots in a separate cloud region, kept 7 days by default.
    • On-premises: you run backups.

  • Data retention

    Configurable
    • ThingsBoard Cloud: 30 to 365 days, depending on plan.
    • Private Cloud: 365 days by default; you can change it.
    • On-premises: you set it.

  • Export

    • Every deployment: telemetry, entities and dashboards are available through the REST API at any time.
    • Private Cloud: when you leave, we prepare a full encrypted PostgreSQL/Cassandra dump of your data.

  • Deletion

    • ThingsBoard Cloud: we delete your tenant after cancellation.
    • Private Cloud: 60 days after cancellation, we permanently delete all backups and cluster data. GDPR erasure requests are completed within 30 days.
    • On-premises: you control deletion.

  • Access by ThingsBoard staff

    • ThingsBoard Cloud and Private Cloud: only authorized ThingsBoard engineers can access the infrastructure, with regular audits and monitoring. They work with your tenant's data only to handle a request you raised; access is role-based and logged.
    • On-premises: we have no access to your installation.

  • Data center certifications

    ThingsBoard Cloud and Private Cloud run in data centers with ISO 27001, PCI DSS and SOC 2 attestations.

Read next

Can’t find what you need?

Our security team answers questions, shares documents under NDA and handles vulnerability reports.