Tuya IoT PaaS provides a four-layer security strategy to ensure the security of smart devices without the risk of information leakage.
1. Data encryption: AES data encryption, even if the device is stolen, it cannot be deciphered.
2. Authorization and authentication: Tuya's algorithm guarantees data isolation, connection authentication, and requests for triple control.
3. Dynamic key: One machine with double-code dynamic key and dynamic password. It can also ensure device security under the case of algorithm exposure.
4. Channel encryption: https encryption Channel transmission to ensure the security of network transmission
Tuya Smart has passed almost all mainstream information security standards in the market. AES and HTTPS encryption ensures data transmission security, local networking and cloud security guarantees, and can be recovered immediately after being attacked. A financial level of security is achieved. At the same time, Tuya has been endorsed by internationally renowned institutions: BSI's ISO certification. Tuya has now passed the GDPR certification and optimized the security protection and compliance requirements of internal data. Through the cooperation with the internationally renowned Trustarc consulting agency, the CCPA privacy compliance audit has been officially completed. Tuya has always been committed to providing the world's leading artificial intelligence and IoT platform. For Tuya, customers come first and protecting users' data has always been one of our core missions.
Tuya has six data centers around the world, which are located in Oregon, Virginia, Frankfurt, Amsterdam, Mumbai, India, and Shanghai China. Build more data centers. Each data center operates independently and separately, and services and data centers in each region are isolated from each other. And Tuya Smart, as a platform that empowers the business customer, will not directly face the individual user.
For all network interactions, Tuya will use TLS for secure communication and additional AES128 encrypted transmission for data content. At the data storage level, Tuya will use AES256 encryption or SHA256 hashing and other desensitization processing to store all user sensitive data.