> ## Documentation Index
> Fetch the complete documentation index at: https://docs.incredibuild.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Data Security

Incredibuild Cloud uses your credentials and roles to manage resources in these cloud providers, and to run your code in those resources.

Once your code is in the cloud provider, it is extremely secure as our supported cloud vendors are among the most secure servers in the world.

The data is secured when moving from Incredibuild to the cloud machines in the following ways:

## Basic Communication Security

The following diagram shows the communication between the Incredibuild Coordinator during the onboarding process, and when requesting and serving cloud resources.

## Data Encryption

You can enable an additional layer of security by encrypting communications between the Incredibuild Coordinator and cloud resources.

You can enable this option in the Coordinator Settings area.

We use the TLS 1.2 cryptographic protocol, through the usage of the OpenSSL library.

The cipher used by default is decided during negotiation by the TLS infrastructure, depending on which ciphers are supported on both sides of the communication link. In our case, one of the AES suites of ciphers is used.

## Using a Virtual Private Network

When Incredibuild creates virtual machines in the cloud, the cloud provider requires that they be created in a container (for example, this is called a VPC in AWS). Incredibuild creates this for you by default.

However, if you want to use your own container, you can specify a Virtual Private Network (VPN). Then all cloud resources will be managed inside your VPN, making communications much more secure.

You can do this using the **Use Private Network** option in the [Cloud Settings](/cloud/settings) during onboarding. If you have already enabled Incredibuild Cloud, you must disable it and enable it again from the Coordinator.