Runtime Protection Agent
No items found.
eBook
eBook

Data Security Whitepaper | Harness Resource | Harness

Discover how Harness prioritizes protecting customer data with our comprehensive Data Security Whitepaper. Our security and privacy by design philosophy forms the cornerstone of our robust data privacy and protection program, ensuring that customer data remains secure across every stage. This whitepaper offers an overview of the security, privacy, and compliance standards embedded in our platform, highlighting key areas such as underlying infrastructure, network security, customer data isolation, and responsible AI governance. Learn more about the core data leveraged throughout the platform and modules, how personal data is protected, and  how Harness ensures the highest standards in data privacy and protection.

Published
May 9, 2025

Guide on its way

Check your inbox — your playbook is ready.

Download now

You're all set

Check your inbox — your download is on the way.

Redirect link
No items found.
Redirect link

What you'll learn

Key Takeaways

End-to-End Encryption for All Data

Data is secured in transit using TLS 1.2 and Application Layer Transport Security. At rest, all information is encrypted at the storage level using AES-256.

Responsible AI Without Customer Data Training

Artificial intelligence models are purpose-built and do not use customer data for training. Prompts are sanitized to remove sensitive content and restricted by domain guardrails.

Compliant Cloud Infrastructure Providers

The platform uses a hybrid storage approach with managed and third-party cloud providers. All infrastructure partners must meet strict compliance standards like SOC 2 Type II, ISO, GDPR, and CCPA.

Strict Network Security and Data Isolation

Production systems are hosted in an isolated Virtual Private Cloud. Customer data is logically separated using unique account identifiers within a multi-tenant environment.

Embedded Privacy and Minimal Data Collection

The platform collects only the minimum personal data necessary to deliver services. Unneeded data is permanently deleted using secure, industry-standard practices.