Wasabi Security

# Protect Your Most Critical Data Assets

Keep your data safe with enterprise-grade, defense-in-depth security from Wasabi.

[Try Wasabi Free](/try-free)

## Wasabi cloud storage security pillars

Our approach to security is deep and multi-faceted, designed to protect your data, your storage account, and your business. 

### Account security 

Only your authorized users should have access to your Wasabi account. We enforce this policy with countermeasures that include MFA, Multi-User Authorization, IAM policies, and Enterprise level SSO options. 

.

### Data security 

Our enhanced security posture includes server-side encryption (SSE-C), built-in immutability, and virtual air-gapping. 

### Physical security 

Wasabi's products and physical data center locations are ISO 27001 compliant. Wasabi is deployed worldwide in top tier data centers that are SOC 2 compliant and certified for PCI-DSS.

.

### Payment security 

We keep your payment information safe in partnership with Stripe, our payment processor. All payments are PCI-DSS certified. 

_Security is obviously always on our mind. Data security is such a high-value need because schools are being targeted for things like ransomware now more than ever. It's not really ‘if’ an attack happens anymore, it's ‘when.’_  
  
**– Kevin Warenda** director of IT services, The Hotchkiss School 

![Hotchkiss logo white](/_next/image?url=https%3A%2F%2Fa-us.storyblok.com%2Ff%2F1019449%2F546x69%2Fa41d537e34%2Fhotchkiss-logo-white.png&w=1920&q=75)

## Prevent unauthorized bucket and account deletions

Our first-of-its-kind Multi-User Authorization feature requires that multiple root users sign off on bucket and account deletion requests—preventing malicious actors who have gained access to your credentials from deleting your data and storage account.

[Learn More](https://cdn.brandfolder.io/BFD8NB05/at/5wv8bnpcbvmbs9gj648hbkv/Wasabi%5FMulti-User%5FAuthentication%5FOne-Pager.pdf)

## Explore all the ways we keep your data safe

Wasabi offers a potent blend of security features that enable defense-in-depth for your cloud storage accounts.

### Encryption 

Your data is encrypted in transit and at rest on the Wasabi cloud storage platform. Wasabi supports the HTTPS protocol and server-side encryption with customer-provided encryption keys (SSE-C). 

[Learn more](https://docs.wasabi.com/docs/how-does-sse-c-encryption-work-with-wasabi)

### MFA and SSO

Prevent account takeovers and data breaches, risks that arise with passwords that can be easily compromised. Wasabi leverages MFA and SSO to strengthen your control over account access. 

[Learn about MFA and SSO](https://docs.wasabi.com/docs/creating-a-virtual-multi-factor-authentication-mfa-device)

### Replication 

Take advantage of intracontinental cloud replication and automatic failover—enabling business continuity by storing multiple copies of your files across different regions. 

[Explore replication](/cloud-object-storage/object-replication)

### Immutability

Wasabi Object Lock maintains a write once, read many (WORM) archiving structure that prevents data from being edited or deleted due to ransomware, bad actors, accidental deletions, and other threats over a set period. 

[Explore Object Lock](/cloud-object-storage/s3-object-lock)

### Virtual air gapping

Wasabi’s Covert Copy™ technology lets you create a hidden copy of a storage bucket that is virtually invisible and inaccessible to anyone except the root user. 

[Explore Covert Copy](/cloud-object-storage/covert-copy)

### Vulnerability reporting 

We maintain open channels of communication that enable you to report vulnerabilities and suspicious activities. 

[Reporting something](mailto:support@wasabi.com)

Wasabi Trust Center

## Security and data protection you can trust

Explore the Wasabi Trust Center, a centralized hub for important legal, compliance, security and corporate responsibility info.

[View the Trust Center](/company/trust-center)

## Related Resources

[![ransomware security](/_next/image?url=https%3A%2F%2Fa-us.storyblok.com%2Ff%2F1019449%2F750x423%2F7c7478b8e7%2Fransomware-security.png%2Fm%2F740x0%2Ffilters%3Aquality(60)&w=1920&q=75)Tech BriefWasabis strong security systems and practices](https://cdn.brandfolder.io/BFD8NB05/at/bn6bh4fhr3p6q9smph39q9rv/Wasabis%5FStrong%5FSecurity%5FSystems%5Fand%5FPractices.pdf)

[![The Bucket Fallback](/_next/image?url=https%3A%2F%2Fa-us.storyblok.com%2Ff%2F1019449%2F750x423%2F0dd7fc2e63%2Fblog-fallback.png%2Fm%2F740x0%2Ffilters%3Aquality(60)&w=1920&q=75)One PagerWasabi multi-User authorization achieve account immutability for cyber resilient cloud storage](https://cdn.brandfolder.io/BFD8NB05/at/5wv8bnpcbvmbs9gj648hbkv/Wasabi%5FMulti-User%5FAuthentication%5FOne-Pager.pdf)

[![The Bucket Fallback](/_next/image?url=https%3A%2F%2Fa-us.storyblok.com%2Ff%2F1019449%2F750x423%2F0dd7fc2e63%2Fblog-fallback.png%2Fm%2F740x0%2Ffilters%3Aquality(60)&w=1920&q=75)BlogWasabi's shared responsibility modelProtecting data in the cloud](/blog/data-protection/wasabi-shared-responsibility-model-protecting-data-in-the-cloud)

[![The Bucket Fallback](/_next/image?url=https%3A%2F%2Fa-us.storyblok.com%2Ff%2F1019449%2F750x423%2F0dd7fc2e63%2Fblog-fallback.png%2Fm%2F740x0%2Ffilters%3Aquality(60)&w=1920&q=75)BlogSecurity and compliance concerns for AI datasets](/blog/data-protection/security-and-compliance-concerns-for-ai-datasets)

[![The Bucket Fallback](/_next/image?url=https%3A%2F%2Fa-us.storyblok.com%2Ff%2F1019449%2F750x423%2F0dd7fc2e63%2Fblog-fallback.png%2Fm%2F740x0%2Ffilters%3Aquality(60)&w=1920&q=75)DOCUMENTATIONWhat third-party compliances does Wasabi hold?](https://docs.wasabi.com/docs/what-third-party-compliances-have-been-attained-by-wasabi)

[![The Bucket Fallback](/_next/image?url=https%3A%2F%2Fa-us.storyblok.com%2Ff%2F1019449%2F750x423%2F0dd7fc2e63%2Fblog-fallback.png%2Fm%2F740x0%2Ffilters%3Aquality(60)&w=1920&q=75)LEgalWasabi data processing agreement ](/legal/data-processing-agreement)

## Frequently Asked Questions

Yes, data moving to and from Wasabi is secured using standard HTTPS protocols and all stored files are encrypted automatically using FIPS-197 certified AES-256 bit encryption. Customers can also supply their own encryption key during the API upload request. Wasabi uses it to write the data and then discards the key from memory. Wasabi also supports client-side encryption where the customer can also encrypt data locally before uploading it to a Wasabi bucket.

Yes, Wasabi supports multi-factor authentication. A Root account users can [set up MFA](https://docs.wasabi.com/docs/creating-a-virtual-multi-factor-authentication-mfa-device?highlight=mfa) and also set it up for sub-users and enforce compliance.

A Root user can add up to three security contacts who will be required to sign off on account activities that the root user specifies such as account deletion and bucket deletion. There is no limit to the number of activities that these contacts can oversee. 

## Get started

Wasabi is here to help you do the utmost to protect your data stored in the cloud. Talk to a cloud storage security expert today. 

[Contact Sales](/contact-us/security)