Square9Sync – Security Overview
Square9Sync is a lightweight utility used to migrate and synchronize data from on-premises folders to secure cloud storage (Amazon S3), automating a process that would otherwise require manual scripting and scheduling.
Encryption in Transit: All data transferred between the on-premises environment and the cloud is sent over encrypted (HTTPS/TLS) connections — the same standard used for secure web and banking traffic.
Encryption at Rest: Cloud storage credentials are never stored in plain text. They are encrypted using the Windows operating system's built-in protection, tied to the specific machine they're installed on, so credentials can't simply be copied off and read elsewhere.
Access Controls: Only authorized system accounts on the host machine can access stored credentials or configuration — standard user accounts on the same machine are blocked from reading them. The background service that performs the sync runs under a specific, designated account rather than a broad system-level identity, limiting what it can access to only what's needed.
No Credential Exposure in Logs: Activity logs never contain the actual cloud credentials, even in error conditions.