Security

Your Sequin database will contain the data mapped to your sync - which may include PII and sensitive information. We take the security of that data seriously.

Please read about our full security practices. Here is a short synopsis of how we keep your data secure:

• Authentication to your sources, both tokens and API keys, are encrypted at rest.
• The Sequin application database is only accessible through a bastion host.
• We only access customer databases by request or to diagnose a sync issue. All access is logged for auditing.
• Sequin workers first backfill your database with all data from your source. During this backfill, Sequin will receive events as they happen to keep your data in-sync.
• Data flows directly from the source, through Sequin workers, to your database. We don’t cache or store data anywhere else.
• We use Sentry and Datadog for error monitoring. Sometimes errors Datadog catches will contain API response data. But these are minimized and our logs in Datadog have a shelf-life of 30 days.
• If you use a Sequin hosted demo database, you are provisioned private database and a database user for you on a shared RDS instance. While Sequin shared instances are secure, we can also sync to a database you own for greater peace of mind.