Security

Your data, our priority

At GateCloud, security is not an afterthought but the foundation of everything we build. Our edge-first architecture ensures sensitive data stays local, while you still benefit from central management and monitoring capabilities.

Security measures

End-to-end encryption

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Communication between Edge Bridge and cloud is always secured.

Edge-first architecture

Sensitive access data is processed locally on the Edge Bridge. Only aggregated logs are synchronized to the cloud.

Secure authentication

Multi-factor authentication (MFA), API keys with granular permissions, and session management with automatic timeout.

Audit logging

Complete audit trail of all actions in the platform. Who did what, when, and from which device — fully traceable.

Automatic updates

Edge Bridge firmware is automatically updated with the latest security patches, without downtime for your access system.

Incident response

24/7 monitoring of our infrastructure with automated alerting and a dedicated incident response procedure.

Data protection

What stays local

  • License plate recognition and matching happens on the Edge Bridge
  • Allowlists are stored locally and synchronized
  • Access decisions are made locally (<50ms)
  • Camera footage is processed and stored locally — only during incidents can relevant footage be sent to the cloud

What goes to the cloud

  • Aggregated access logs
  • Device health and status information
  • Configuration and allowlist updates (encrypted)
  • Alerts and notifications

Responsible disclosure

Found a security issue? We appreciate your help in improving our security. Please contact us through the channel below before publicly disclosing the issue.

Report security issues

Email: security@gatecloud.io

We aim to respond to security reports within 48 hours.

Questions about security?

Our team is ready to answer your questions about security and compliance.

Get in touch