Security

Security is a feature, not an afterthought

Hubcove handles your team's files and calls, so we treat security as core product work, not a checklist we run once a year.

Encryption in transit

Every connection to Hubcove — app, sync client and API — runs over TLS 1.3. Legacy TLS versions are rejected at the edge.

Encryption at rest

Files and metadata are encrypted at rest with AES-256. Encryption keys are managed separately from the storage layer.

Isolated infrastructure

Workloads run in isolated VPCs across EU-based data centers, with no direct public access to storage or database nodes.

Least-privilege access

Internal access to production systems is role-based, logged, and reviewed quarterly. Support staff cannot read file contents.

Infrastructure

Hubcove runs on infrastructure hosted in the EU. Application, sync and calling services are separated into their own network segments, so a problem in one can't cascade into the others. All services sit behind a hardened edge proxy — nothing talks to storage or the database directly from the public internet.

Data handling

We only store what's needed to run the product: your files, workspace metadata, and account details. We don't scan file contents for advertising, and we don't sell data to third parties — see the Privacy Policy for the full picture.

Backups are encrypted and retained on a rolling window. Deleted files are purged from backups within 30 days of deletion.

Account protection

  • Two-factor authentication (TOTP) available on every plan, including Free.
  • Session and device management — revoke access from any device in one click.
  • Audit log of sign-ins and admin actions on Business plans.
  • SSO (SAML) for Business workspaces.

Responsible disclosure

Found a security issue? We want to know before anyone else does. Email security@hubcove.online with details and reproduction steps. We aim to acknowledge reports within 2 business days and don't pursue legal action against good-faith researchers who follow this process.

Bring your team's work into one place.

Get started free