Posts

How do you ensure security?

Noggle Security in a nutshell

Each person using Noggle managed services expects their library informtaion to be secure and confidential. We understand how important this is to our customers and work to the best of our abilities to ensure these expectations are met.

In a nutshell:

1) We use AES-256 encryption by default with individual salts to encrypt libraries for sharing.

2) End-To-End encryption from client to client: Decryption is only done on the receiving client – all data in the noggle netword stays encrypted.

3) You can add private encryption keys (“master passwords”) per each library on top of our AES-256 standard encryption layer. These private keys are not stored or recorded in the noggle network.

4) Any personal or individual information related to a library gets obfuscated (library name, owner name, contat information) locally before uploading to the cloud. Even our employees or admins can not see who has shared what as all personal library related information is obfuscated in our noggle vault databases.

5) We decouple owner information from raw library data to add another layer of security. The obfuscated owner information for libraries is not stored in the same place where the raw encrypted library is stored for retrieval.

6) Any client needs to be validated and authorized against our network before a library can be received with the noggle client.

7) Our data storage facilities and data processing servers are located in the European Economic Area (EEA) / European Union. As german company, we are compliant with one of strongest data privacy and data protection laws in the world.

In the unlikely case that our system is penetrated you can feel secure knowing that your private library keys are never stored on our servers; which means the bad guys can’t get access to your shared libraries even if they hack our network. Additionally, any data that is passed through our noggle network is obfuscated and encrypted with the strongest encryption in the industry by default – AES 256.

Please read our detailed security details for more details.

Where are your servers located?

Our servers are operated in datacenters within the EU.

Please read our security guidelines for more information on security.

Security Guidelines