Synology C2 Support Center

Data in Synology C2 data centers can only be accessed by the Synology Account that initially uploaded them. Your Synology NAS communicates with C2 over a securely encrypted SSL connection.

Synology C2 server protects all data from data breaches with encryption-at-rest and the data are rendered unreadable before they are stored on any drive.

Additionally, it is highly recommended that users enable client-side encryption in Hyper Backup, for the data to be unreadable using the advanced AES-256 encryption standard before transmission to Synology C2.

You may enable 2-factor authentication for an extra degree of security. Enabling 2-factor authentication guarantees that your data can only be accessed with a code generated by a mobile authenticator app.

C2 Encryption Key is the key used to encrypt and decrypt users' data on Synology Account. The C2 Encryption Key you create is not stored in any way by Synology C2, and only the individual who knows the C2 Encryption Key has access to the encrypted data on Synology Account, not even Synology. Please never lose your C2 Encryption Key. If lost, Synology would be unable to retrieve the lost key and data.
C2 Encryption key is used across services on the C2 platform; those that do not make use of this key have separate encryption mechanisms.

Synology data centers have passed rigorous inspections for strict security procedures and physical safety measures to meet Synology's high standards set for incident response and access restrictions.

Synology monitors employee access to its storage locations. All data on Synology C2 server is protected against data breaches or physical theft with encryption-at-rest.

Synology C2 uses highly available and redundant infrastructure designed to eliminate single points of failure and ensure uninterrupted power supply year-round. Meanwhile, we protect against hardware failure by applying erasure coding to all data stored on our servers.

Similar to a RAID setup, our erasure coding stripes data into many pieces, with a redundancy of three pieces (meaning three servers can crash and your data will still be available). However, with erasure coding, users do not need to wait for recovery (which is instant). Erasure coding also helps detect and repair corrupted data.

Yes, Synology C2 offers a GDPR-compliant DPA that allows users to comply with contractual obligations as set out in the EU General Data Protection Regulation. The Synology C2 GDPR DPA is incorporated into the Synology C2 Terms & Conditions and applies automatically to all customers worldwide who require GDPR compliance.

Synology C2's Europe - Frankfurt and APAC - Taiwan colocation data center facilities are certified up to the ISO 27001 standard, one of the strictest available security frameworks for information technology.

Synology C2's US colocation data center facilities have achieved comprehensive SOC 2 Type II certification, confirming it has strict procedures in place to keep user data secure.

Synology handles your payment details in compliance with PCI DSS by processing and storing your billing information with a PCI Level 1 Service Provider.

Yes. Synology C2 provides users with all the tools they need to integrate the platform's services into their workflow in accordance with the requirements set forth by HIPAA regulations. Check here to learn how Synology C2 can help you stay compliant.