Flatfile is hosted in an AWS virtual private cloud (VPC), and it runs inside a Kubernetes cluster. The only public entry point to our cloud is our public API endpoint, which is routed through a load balancer. Both public traffic and traffic inside our AWS VPC are encrypted using TLS 1.2 or higher, and all uploads are streamed to an encrypted AWS S3 bucket using a signed URL with a limited lifespan. Uploaded files cannot be fetched from the S3 bucket by the customer; they can only be accessed via an authenticated API. For more information, click here.