Splashtop is committed to offering secure remote access solutions since 2006. Today, we power over 50,000 businesses and 18 million end users around the world, including large banks, law enforcement, government agencies, local governments, and government contractors.

Secure Infrastructure

Our Cloud infrastructure is hosted on Amazon Web Services (AWS) which provides a secure network and computing environment, including but not limited to firewalls at network, application and instance layer, data encryption, DDoS mitigation etc.

Intrusion Protection

We have intrusion detection and defense mechanisms for our production environment running 24×7. We have adopted industry best practices when building our Cloud application stacks to ensure security is enforced and instances are fortified.

App Security

On endpoint devices, we have multiple levels of security protection, including mandatory device authentication and optional two-factor-authentication and security code. All remote sessions are protected with TLS and 256-bit AES encryption.

Splashtop Security Features

Splashtop’s business products are specifically built to give IT full control over securing the data while giving employees the flexibility to access it from anywhere. They are especially applicable to organizations operating in industries with stringent legislative and compliance regulations where controls for data privacy and systems security are mandated.Splashtop security features also help support HIPAA and ISO 27001 compliance. See the white paper below for details.

  • Industry standard TLS with AES 256-bit encryption
  • Device authentication
  • Multi-level password security
  • Two-step verification/two-factor authentication
  • Blank screen
  • Screen auto-lock
  • Session idle timeout
  • Remote connection notification
  • Copy/paste control File transfer control
  • Remote print control
  • Lock streamer configuration
  • Proxy Server authentication
  • Digitally signed applications
  • Active Directory integration (Enterprise edition)

GDPR Compliance

The EU General Data Protection Regulation (GDPR) is designed to harmonize data privacy laws across Europe, to protect and empower all EU citizens’ data privacy, and to reshape the way organizations across the region approach data privacy. After four years of preparation and debate the GDPR was finally approved by the EU Parliament on April 14, 2016.

Splashtop is committed to GDPR compliance and our services will comply with the GDPR when it becomes enforceable on May 25, 2018.

PCI Compliance

The Payment Card Industry Data Security Standard (PCI DSS) is an information security standard for organizations that handle branded credit cards from the major card schemes. The standard was created to increase controls around cardholder data to reduce credit card fraud. PCI compliance is required for organizations that store, manage and process cardholder information.

Splashtop is not a payment solution and we do not store our users’ credit card or financial data in our system.
Splashtop uses third party vendors to store and manage cardholder data and conduct online transactions. We provide secure connections to our PCI compliant payment vendors to ensure compliance.

Additional Resources

White Paper: Splashtop HIPAA Compliance and Security

If you have any further questions, please contact us at sales@splashtop.com or (408) 861-1088 x125.