# Security of the Elastic Cloud Hosted platform?

**URL:** <https://discuss.elastic.co/t/security-of-the-elastic-cloud-hosted-platform/136890>\
**Category:** Elasticsearch\
**Created:** [June 21, 2018, 1:49pm UTC](https://discuss.elastic.co/t/security-of-the-elastic-cloud-hosted-platform/136890 "2018-06-21T13:49:24Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![nilleb](https://avatars.discourse-cdn.com/v4/letter/n/839c29/32.png) [@nilleb](https://discuss.elastic.co/u/nilleb)\
**Post date:** [June 21, 2018, 1:49pm UTC](https://discuss.elastic.co/t/security-of-the-elastic-cloud-hosted-platform/136890/1 "2018-06-21T13:49:24Z")

</div>

Please, correct me if I am wrong.

A Elastic Cloud deployment resides on the chosen cloud provider (may be GCP, Amazon, Azure).  
It belongs to a "project" that [elastic.co](http://elastic.co) owns (I am using a GCP term here, with which I am familiar more than Azure or Amazon). The security at rest paradigm allows [elastic.co](http://elastic.co) to say that the data on the elasticsearch servers won't be accessible to other actors on the same "project".

The servers in the deployment seem to be inaccessible to the customer via SSH. But is it the case also for [elastic.co](http://elastic.co) personnel?

Do they have the possibility to access these servers if the customer has changed the deployment passwords?

Where can I find this information in the Terms & Conditions of the Cloud Hosted offering?

Thanks in advance,  
Ivo

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 19, 2018, 1:49pm UTC](https://discuss.elastic.co/t/security-of-the-elastic-cloud-hosted-platform/136890/2 "2018-07-19T13:49:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.