# Security at Pachca > How Pachca keeps your team chat secure and reliable: encryption, independent security audits, a 99.9% SLA, SSO, DLP integrations and more. Источник: https://pachca.com/en/security When it comes to work chat, security always matters. Here's what we do to protect your data and keep Pachca running reliably. [Privacy and personal data processing policy](https://pachca.com/privacy-policy) ## Latest external security audits //---------------\[ AUDIT 3 \]---------------// COMPANY: "POSITIVE TECHNOLOGIES" DATE: "APRIL 2026" //---------------\[ AUDIT 2 \]---------------// COMPANY: "BASTION" DATE: "MARCH 2025" //---------------\[ AUDIT 1 \]---------------// COMPANY: "CODEBY" DATE: "APRIL 2024" ## Compliance with data protection laws and standards ### [Licenses](https://selectel.ru/about/security/) FSTEC FSB ### [Certifications](https://selectel.ru/about/security/) ISO:2021 SSAE 18 PCI DSS 3.2.1 ### [Compliant with Federal Law No. 152-FZ (Russia's personal data law)](https://pd.rkn.gov.ru/operators-registry/operators-list/?id=78-21-007767) Listed in the Roskomnadzor registry of personal data operators ## Reliable, fault-tolerant infrastructure ![Selectel](https://pachca.com/selectelBlue.avif) ### Servers in Russia For reliability, Pachca runs on a geographically distributed network of Selectel and Yandex Cloud servers. All of them are located in Russia ### Selectel products we use - • Dedicated servers - • Cloud servers and VMware-based cloud - • Managed Kubernetes and cloud databases - • Cloud storage - • Veeam backup - • DDoS protection ## Internal security practices and procedures ### Data encryption Data is encrypted at rest and in transit and stored in secure infrastructure. All traffic is encrypted with TLS v1.3, DTLS, SRTP and AES-128 ### SLA Contracts on the Corporation plan guarantee 99.9% uptime (SLA). If downtime exceeds that level, we issue compensation to affected customers. ### Attack protection Independent experts assess our security every year. Latest external audit: **Positive Technologies, 2026** ### [Bug bounty program](https://pachca.com/en/security/bug-bounty) We're happy to reward you for the vulnerabilities you find. ### Regular updates Our infrastructure has an established process for managing security updates. ### Documents Terms of Service → Privacy Policy → Personal Data Processing Policy → External security assessment reports, the personal data security assessment report for our information system and the system architecture diagram are available on request. ### Internal testing We run our own penetration tests (following the [OWASP WSTG](https://owasp.org/www-project-web-security-testing-guide/) methodology), social engineering awareness tests for employees and load tests. ### Data center protection Our data centers are protected against DDoS attacks. Application-layer protection (WAF) can be added as well ### Data backups We back up your data automatically every day ### Data hashing We use AES algorithms to encrypt and hash data ## Multi-layered protection ### Manage employee access via API Pachca gives your company its own private workspace. Inside it, you manage user roles: assign administrators, add employees and multi-guests. When someone leaves the company, you can revoke their access to every chat in one click. You can automate all of this via the API, too ### Group policy management Manage Pachca app settings and updates through group policies. Installers are available on request: .msi (Windows), .dmg (macOS), .deb/.rpm (Linux) ### SSO sign-in and user management To manage large groups of users and tighten security, connect Pachca to your company directory, such as Active Directory (AD), Keycloak, Yandex 360 or other services ### Block file access outside your corporate network Add the IP addresses of your company's private network, like your office networks, in workspace settings. Anyone who opens Pachca from another network won't be able to view or download files in chats ### Built-in real-time antivirus Turn on antivirus scanning in system settings. Every file sent is scanned automatically, and suspicious files are blocked and flagged ### DLP integration We help you set up custom DLP integrations over ICAP, tailored to your workflows ### VPN tunnel setup On request, we can set up a VPN between your company's resources and Pachca ### Logging and audit log API The API gives you access to logs of events in your workspace. Events can be forwarded to a dedicated server or a monitoring service (SIEM) for processing ### Session list and controls Every user can see their active sessions in their profile and end any of them. Each session shows the IP address, location, device type and last active time ### Two-factor authentication (2FA) Every user can add an extra layer of verification to their account. An authenticator app generates one-time codes to enter when logging in to Pachca. Workspace administrators can filter members to see who hasn't turned on 2FA ![Multi-layered protection](https://pachca.com/security-features.gif) ## Frequently asked questions. ### Is there an on-premise version (can we host Pachca on our own servers)? Is one planned? Pachca runs in the cloud. Enterprise customers can also choose hybrid on-premise (BYOK): message encryption keys stay on your side, so you get full control over your data, just like with a self-hosted installation. [Learn more about hybrid on-premise (BYOK)](https://pachca.com/help-center/administration/byok). ### Can Pachca integrate with DLP systems? Yes, we can set up a custom integration via the API. Share your requirements with us and we'll take it from there. ### Can we export our data? Yes. Workspace owners on the Corporation plan can export messages from group chats in workspace settings. ### When was Pachca last down, and for how long? Over the past year, we maintained 99.9% uptime (SLA). You can check current uptime [on our status page](https://status.pachca.com/). ### Put Pachca to work. Invite your team and start chatting. It's free. [Start for free](https://app.pachca.com/signup)