Security

One database, one set of files#

Every database is its own set of files on object storage. Nothing is shared between two databases, so isolation, restore and erase work on one database without touching another.

Connections#

Connections use TLS. You sign in with a user name and password (SCRAM-SHA-256), the way you do with MongoDB. Users and roles belong to a database and are managed with the usual MongoDB commands.

Data at rest#

Data is stored encrypted in object storage, in the region you chose when you created the database. The region is fixed for the life of the database.

Your data, your control#

You can export a whole database in a format mongorestore imports, restore one database to an earlier point in time, and erase one database completely. Erasing deletes every file of the database. See Commands.

The console#

You sign in to the console with Google, GitHub or a link sent to your email. Scripts use API keys, which are stored as hashes.