Security Overview

Tasmanian Cloud is built with security as a core principle. All infrastructure is designed to protect your data while maintaining compliance with Australian standards.

Certifications

Data Sovereignty

• 100% Tasmanian - All data stored in Tasmania
• No Offshore Transfer - Data never leaves Australia
• Local Ownership - 100% Tasmanian owned and operated

Encryption

At Rest

In Transit

• TLS 1.3 - All API and web traffic
• Perfect Forward Secrecy - ECDHE key exchange
• Certificate Pinning - Available on request

Post-Quantum Cryptography

Object storage uses NIST-approved post-quantum algorithms:

• Kyber-768 - Key encapsulation mechanism
• Dilithium-3 - Digital signatures

Network Security

DDoS Protection

• Cloudflare Magic Transit at edge
• 100 Tbps+ mitigation capacity
• Automatic attack detection

Firewall

Default-deny firewall with:

• Stateful packet inspection
• Geo-blocking available
• Custom rules via API

VPN

Netbird mesh VPN for private connectivity:

# Install Netbird client
curl -fsSL https://pkgs.netbird.io/install.sh | sh

# Join Tasmanian Cloud network
netbird up --management-url https://vpn.tasmanian.cloud

Access Control

Authentication

• API key-based authentication
• Optional MFA for panel access
• Session management with automatic expiry

Authorization

Role-based access control (RBAC):

Audit Logging

All actions are logged:

• API requests
• Panel actions
• Resource changes
• Access attempts

Vulnerability Management

• Continuous Scanning - Weekly vulnerability assessments
• Patching - Critical patches within 24 hours
• Penetration Testing - Annual third-party testing

Incident Response

Security Best Practices

For Customers

1. Use API Keys - Never share credentials
2. Enable MFA - Where available
3. Rotate Keys - Regularly rotate API keys
4. Monitor Logs - Review access logs
5. Encrypt Data - Use client-side encryption for sensitive data

Example: Secure VM Access

# Disable password authentication
# Edit /etc/ssh/sshd_config
PasswordAuthentication no
PubkeyAuthentication yes
PermitRootLogin no

# Use non-standard port
Port 2222

# Restart SSH
systemctl restart sshd

Reporting Security Issues

If you discover a security vulnerability:

• Email: security@tasmanian.cloud
• PGP Key: Download
• Response time: 24 hours

Compliance Reports

Available upon request for verified customers:

• SOC 2 Type II (planned)
• ISO 27001 certificate (in progress)
• Penetration test summaries

Sub-processors

Tasmanian Cloud uses the following sub-processors to deliver services. This list is reviewed and updated annually.

Current Sub-processors

Self-Hosted Services

The following services are hosted on Tasmanian Cloud's own infrastructure:

Sovereignty Roadmap

Our commitment is to become fully sovereign. The following initiatives are in progress:

Shared Responsibility Model

---

Last updated: February 2026