By Brad Slavin, CEO at DuoCircle · Updated April 2026 Security at Tenant Migration
Your email security is our top priority. Tenant Migration employs industry-leading security measures to protect your data during the critical tenant migration process, including TLS 1.2+ encryption for all data in transit, AES-256 encryption for data at rest, multi-factor authentication (MFA) for all administrative access, and role-based access control (RBAC) across our infrastructure. Our SOC 2 Type II certification is independently verified through annual third-party audits covering security, availability, and confidentiality. We operate redundant data centers with 24/7 monitoring, DDoS protection, and geographically diverse queuing zones in the USA and EU for GDPR compliance.
Is Tenant Migration SOC 2 Type II Certified?
Independently Verified
Tenant Migration has successfully completed SOC 2 Type II certification, demonstrating our commitment to the highest standards of security, availability, and confidentiality.
What this means for you: Independent auditors have verified that our security controls are properly designed and operating effectively over time, giving you confidence in our ability to protect your data.
What Security Measures Does Tenant Migration Use?
Data Encryption
- TLS 1.2+ encryption for all data in transit
- AES-256 encryption for data at rest
- Encrypted backups with secure key management
Access Control
- Multi-factor authentication (MFA) required
- Role-based access control (RBAC)
- Regular access reviews and privilege audits
Infrastructure Security
- Redundant data centers with 24/7 monitoring
- DDoS protection and traffic filtering
- Regular security patches and updates
Compliance & Auditing
- Annual third-party security audits
- Continuous compliance monitoring
- Detailed audit logs and activity tracking
How Are Queued Emails Protected During Migration?
Zero Email Loss Guarantee
Our Message Replay technology ensures that no email is lost during the migration process. All queued emails are stored redundantly across multiple data centers.
45-Day Retention with Secure Deletion
Emails are automatically and permanently deleted after 45 days or upon successful delivery. When you close your account, all data and backups are securely deleted using industry-standard data destruction methods.
No NDR Exposure
We ensure that no Non-Delivery Reports (NDRs) are sent back to original senders during migration, preventing confusion and maintaining security.
What Security Practices Does Tenant Migration Follow?
Employee Security
- • Background checks for all employees
- • Security awareness training
- • Signed confidentiality agreements
- • Principle of least privilege access
Incident Response
- • 24/7 security monitoring
- • Documented incident response plan
- • Rapid notification procedures
- • Regular incident response drills
How Does Tenant Migration Handle Privacy and Compliance?
DuoCircle is committed to protecting your data privacy and maintaining compliance with global data protection regulations including GDPR and CCPA. All queued emails are stored in the geographic zone you select — USA or EU — ensuring data residency requirements are met. We provide a formal Data Processing Agreement (DPA) on request, covering international data transfers and sub-processor disclosures. Customer data is fully isolated and segregated, and we never share data with third parties for marketing purposes. When you terminate the service, all emails, backups, and metadata are securely deleted using industry-standard data destruction methods.
- GDPR compliant with Data Protection Addendum available
- CCPA compliant - see our Privacy Policy
- No third-party data sharing for marketing purposes
- Customer data isolation and segregation
- We will sign a DPA and NDA if required by your organization
Security Questions or Concerns?
Our security team is here to help. Whether you have questions about our security practices, need to report a security concern, or want to request our SOC 2 report, we're ready to assist.
Security Team
24/7 Support
Support Portal
Ready to Migrate Securely?
SOC 2 Type II certified. Zero email loss. Your data is safe with us.