Company / Security
Control starts with access.
Account protection, deliberate access, and a recovery plan all matter. Here is how Data Hall handles platform access and what you control inside your servers.
Start with your account.
Enable two-factor authentication, review your sessions, and give each teammate their own login.
Follow the account security guideAccount protections
Two-factor authentication is available for customer accounts. Review active sessions and revoke devices. A new kind of sign-in device triggers an email notice.
Credential handling
Generated server credentials are encrypted at rest and revealed once through the console. API keys are stored as hashes. Credential values are not sent in emails.
Organization access
Server and billing access is scoped to your organization. Owners manage membership and ownership. Customer actions appear in the supported team activity view.
Protect the environment you run.
Your server gives you operating-system access. Configure it for your application’s security needs and review it as your team and workload change.
- Apply operating-system and application updates.
- Limit exposed ports and review installed SSH keys.
- Store application secrets securely and rotate them when needed.
- Keep recovery copies and test application-level restores.
Report a concern.
Contact Support about suspected account or server access issues. Include the relevant time, resource, and symptoms. For abuse originating from a hosted address, use the abuse report form.
For a suspected platform vulnerability, contact us with a brief description so we can coordinate a private report. Keep credentials and sensitive customer data out of the initial message.
Make access part of your setup.
Use the documentation to configure keys, protect your account, and plan recovery.