Last updated November 2020

Effective date: 01/14/2022

Hybrid Architecture

Tantl utilizes a hybrid architecture to ensure your data stays on your servers. Customers can choose to either temporarily store their data encrypted in the cloud, or their may use a hosted worker to ensure their data is stored in their own environment.

Hybrid Architecture


We encrypt all data at rest and protect it in transit with TLS. Tantl's metadata database is encrypted by Amazon AWS using standard AES-256 encryption algorithms.

If using our free tier then your data is encrypted in an S3 storage bucket with a 30 day retention policy. On the enterprise plan, you can bring your own S3 bucket and ensure data doesn't leave your warehouse.


We complete regular security-design reviews, penetration tests using trusted security vendors, and are currently in a Soc2 ready posture.

Official audit is scheduled to be complete soon.

Security Practices

Regularly conduct security awareness training sessions with all employees.

Force HTTPS on all connections, so data in-transit is encrypted with TLS 1.2.

Contact Us

If you have any questions about security, please contact us:

By email: