Is CloudyFy TV secure?
CloudyFy TV is SOC 2 Type II compliant. CloudyFy TV is built and run by Silicon IT Hub Pvt. Ltd., which is ISO 27001 and ISO 9001 certified. Behind it is documented architecture: database-level tenant isolation, encrypted integration credentials, multi-factor authentication, single sign-on, and a full audit log, all listed below with no rounding up.
What security architecture does CloudyFy TV actually have?
CloudyFy TV has row-level tenant isolation in PostgreSQL, AES-256-GCM encryption of third-party integration credentials, TOTP multi-factor authentication with recovery codes, OIDC and Google single sign-on with just-in-time provisioning, IP allowlisting for login, and a full audit log with CSV export. Here is how each of these works in CloudyFy TV.
Tenant isolation
Enforced at the database layer, not in application code.
MFA
TOTP authenticator apps, with single-use recovery codes.
SSO
OIDC-compliant identity providers and Google, with JIT provisioning.
Audit log
Every action, exportable as CSV.
Credential encryption
AES-256-GCM on stored integration credentials.
IP allowlist
Limit logins to the addresses you trust.
How each control actually works
Row-level security for tenant isolation
CloudyFy TV is multi-tenant: one database serves every company, but PostgreSQL row-level security policies enforce the company boundary at the database layer. That means a query that forgets to filter by company still cannot return another company's rows, because the database itself refuses the read. This is a stronger guarantee than application code that has to remember to add a WHERE company_id = ... clause on every query, because it holds even when a new engineer writes a query that forgets to filter by tenant. The isolation guarantee lives in the database schema, not in the discipline of whoever wrote the endpoint that week.
Encrypted integration credentials
CloudyFy TV connects to third-party services like weather, RSS feeds and YouTube on your behalf, and the credentials for those connections are encrypted with AES-256-GCM before they are stored. A database backup or an internal breach does not expose the plaintext key or token for an integration you configured.
Multi-factor authentication and single sign-on
Every account can enable TOTP-based multi-factor authentication using a standard authenticator app, with single-use recovery codes for when the device is unavailable. For organisations that centralise identity, CloudyFy TV supports single sign-on through any OIDC-compliant identity provider or Google, with just-in-time user provisioning so a new hire's first login creates their account automatically inside your existing access policy, without a CloudyFy TV admin manually adding them first.
Roles, permissions and a full audit log
Access is controlled through roles built from 34 permission modules, plus per-user whitelists that can limit a specific person to specific devices or layouts. Every action taken in the account is recorded in an audit log that can be exported as a CSV for your own records or a compliance review.
Audit status, scope and support
CloudyFy TV is SOC 2 Type II compliant. CloudyFy TV is built and run by Silicon IT Hub Pvt. Ltd., which is ISO 27001 and ISO 9001 certified. Ask us for the SOC 2 Type II report and the ISO 27001 and ISO 9001 certificates as part of your security review. SOC 2 Type II, ISO 27001 and ISO 9001 are the frameworks CloudyFy TV claims. We do not claim HIPAA, PCI DSS or any other framework. If a specific framework is a hard requirement for your procurement process, say so early and we will tell you honestly whether CloudyFy TV meets it.
Single sign-on works with any OIDC-compliant identity provider, including Microsoft Entra ID, Okta and Google, with just-in-time user provisioning. SAML is not supported today. We also do not publish an uptime service-level agreement as a marketing number; internal performance targets exist for engineering purposes, but they are not a contractual guarantee.
Support is by in-app ticket and phone, with a first response within 4 business hours for urgent issues, 1 business day for normal issues and 2 to 3 business days for everything else. These are first-response targets, and support is included with every plan.
FAQs
Have a security questionnaire to fill out?
Send it to our team and we'll answer every line honestly, including where the answer is no.