Security & Privacy
Security is built into every layer of the Edge platform. From the network infrastructure to individual account controls, Edge provides the tools and practices needed to keep your data and deployments safe.
Encryption
In Transit
All data transmitted to and from Edge services is encrypted using TLS 1.3. HTTPS is enforced across all endpoints — API, control panel, CDN and DNS.
At Rest
Customer data stored on Edge infrastructure is encrypted using AES-256 encryption with regularly rotated keys. This applies to VM storage, object storage and backups.
Account Security
Two-Factor Authentication
Edge accounts support TOTP-based two-factor authentication, compatible with Google Authenticator, Authy, 1Password and other authenticator apps. Recovery codes are provided at setup for account recovery. 2FA is strongly recommended for all accounts and is available on every plan.
Session Management
Active sessions are tracked with device information and can be viewed from the control panel. Individual sessions can be revoked at any time, and all sessions are invalidated on password change.
SSH Key Management
SSH keys for Compute VMs are managed centrally from the control panel. Keys are injected into VMs at creation, providing secure passwordless access. Multiple keys can be stored per account.
Agent Access Codes
AI agent access codes are separate from user credentials and can be scoped by product, permission level and budget. Codes can be revoked instantly from the control panel. See Agentic Support for details.
Network Security
DDoS Protection
DDoS mitigation is built into the core of the Edge network. Malicious traffic is absorbed and filtered across the global infrastructure before it reaches your resources. This protection is automatic and included in every plan — no configuration required.
Security Groups
Compute VMs can be protected with security group rules that control inbound and outbound traffic. Define firewall policies per VM or apply shared rules across multiple machines for consistent network security.
DNS Security
Edge DNS operates on a worldwide anycast network with built-in redundancy. The distributed architecture makes DNS infrastructure resilient to attacks, and the network has maintained 100% uptime since launch.
Data Handling & Privacy
Data Location
Edge infrastructure is distributed globally. Data is stored in the regions where resources are provisioned. For specific data residency requirements, contact the team.
Data Ownership
Your data is yours. Edge does not access, analyse or sell customer data. When you delete resources, your data is permanently removed from the platform.
GDPR Compliance
Edge is compliant with the EU General Data Protection Regulation (GDPR). Personal data is processed in accordance with data protection principles and the Edge Privacy Policy.
Compliance Certifications
- GDPR — compliant
- ISO 27001 — in progress
- SOC 2 Type II — in progress
Operational Security
- Regular audits — independent security audits and penetration testing
- Continuous monitoring — 24/7 monitoring for threats, vulnerabilities and anomalous activity
- Incident response — defined procedures with prompt customer notification of any security events
- Team security — all Edge employees undergo background checks and security training. Access to production systems is strictly controlled and audited.
Responsible Disclosure
If you discover a security vulnerability in any Edge product or service, please report it to security@edge.network. Do not open a public issue. We take all reports seriously and will respond promptly.
For full details, visit edge.network/security and the Edge Privacy Policy.