Authentication

Ensure that only the right identities (users, services, agents) can connect to your CrateDB clusters. CrateDB supports secure authentication methods for both managed and self-managed deployments.

Authorization & Role-Based Access Control (RBAC)

Once connected, control what identities can do. With fine-grained permissions and role definitions, you can enforce the least privilege principle to protect your data and operations.

Encryption (in-transit & at-rest)

Data must be protected both on the wire and when stored. CrateDB supports TLS/SSL for all client and internal node connections, and encrypted storage volumes for persistent data.

Audit logging

Full visibility into who did what, when and how. CrateDB Cloud logs all relevant actions and accesses, enabling traceability and forensic capability.

Compliance & certifications

Trust is built on standards. CrateDB Cloud is certified under ISO 27001 on AWS and Azure, demonstrating that its processes meet rigorous security and information-management standards.

Why it matters

• End-to-end protection: From connection to storage to auditing, every layer is secured.
• Enterprise readiness: Meet regulatory and internal requirements without sacrificing real-time performance or flexibility.
• Trust for your users: Your customers, partners and stakeholders expect data platforms to enforce modern security practices.
• Operational peace of mind: Whether running in the cloud, on-premises or at the edge, your deployment inherits a strong security foundation.

Integrations & deployment contexts

• For CrateDB Cloud, security features such as encryption at rest, IP allowlists, and isolated clusters are enabled by default.
• For self-managed CrateDB, you have full control: you can configure TLS/SSL for both client and internal communication, enable role-based access, activate auditing and apply your own governance procedures.
• The same security model covers edge, hybrid and multi-cloud use cases, ensuring consistent policy and enforcement wherever you deploy.