Cloud & Private Cloud
Multi-region hosting with a dedicated, isolated instance available in the region your compliance requirements demand.
See cloud deployment →Company/Trust Centre
Fleet control is a trust problem
Hive can push commands to every device you own. We treat that privilege the way your security team would want us to: security-first architecture, continuously reviewed, and documented end to end.
Our posture
Security as infrastructure
This page covers company-level security governance: certifications, data residency, and disclosure. For the controls built into the product itself, see Security & Compliance.
Every device Hive manages trusts commands signed by our control plane. That means our own infrastructure, employee access, and vendor relationships get the same scrutiny we ask you to apply to the devices you deploy: security-reviewed, continuously monitored, and documented for the people who have to sign off on us.
Certifications
Security-first, by design
Security-First Architecture
Continuous Vulnerability Management
GDPR-Aligned Practices
Security-First Architecture
Defence-in-depth design across device, transport, and control-plane layers, reviewed continuously as the platform evolves.
Continuous Vulnerability Management
Ongoing security review and vulnerability management, with formal certifications like SOC 2 and ISO 27001 on our roadmap as we scale.
GDPR-Aligned Practices
Data processing practices, subject-access workflows, and cross-border transfer mechanisms aligned to EU requirements.
Data residency
Your data, your region
Where the control plane runs is your decision, not a default we make for you.
On-Premises
Run the full control plane in your own data centre. Data never leaves infrastructure you control.
See on-premises →How we operate
Disclosure and diligence
- Subprocessors are reviewed before onboarding and listed for customers on request. See the Legal library for the current list
- A published security.txt and a standing vulnerability disclosure programme at security@hivemdm.com
- Independent penetration tests twice yearly, with executive summaries available under NDA
- Good-faith security researchers are never pursued for responsible disclosure
Related
Keep exploring
Security & Compliance
The product-level controls: signed commands, RBAC, tenant isolation, and audit logs.
Explore →Legal
Privacy policy, terms of service, DPA, SLA, and the current subprocessor list.
Explore →Company
The full Company overview: mission, principles, leadership, and where to find us.
Explore →