# Cloud security

This guide examines the measures in place to provide a secure environment for customers and partners using Apteco Cloud. It covers all areas, including infrastructure, customer data, privacy matters, and the Apteco/Orbit application itself.

- [Application security](<https://help.apteco.com/en/admin/security-and-privacy/cloud-security/application-security/index.md>): penetration testing, credential rules, and product security features
- [Infrastructure security](<https://help.apteco.com/en/admin/security-and-privacy/cloud-security/infrastructure-security/index.md>): data centre certification, firewalls, OS hardening, and disaster recovery
- [Data security and privacy](<https://help.apteco.com/en/admin/security-and-privacy/cloud-security/data-security-and-privacy/index.md>): encryption, employee data access, backups, and data removal
- [Technical and organisational measures](<https://help.apteco.com/en/admin/security-and-privacy/cloud-security/technical-and-organisational-measures/index.md>): TOMs covering access control, intrusion prevention, separation, and availability