FAQ: Zoho's Data Security

08-01-2025 10:28 AM - Comment(s) - By Norhannah Zahyrah

FAQ: Zoho's Data Security

Wondering how safe your data is under Zoho's care? We understand how important data protection is for Zoho users, and we're here to give you peace of mind. Let us guide you through the details: from where your data is stored, who gets access to it, our certifications and everything in between.

Find below, answers to your most Frequently Asked Question on Zoho's Data Security.

Where is my data stored? Can I choose where my account and data will be located?

The Data Center where your data is stored is selected automatically based on the Country chosen by you while signing up for Zoho services. The information regarding which Data Center has been selected is displayed right below the Country picklist in the sign up form.

At any instant, you can know which Data Center your data resides in by looking at the URL on the browser when you are logged in to Zoho and are using our applications, or by clicking here .

1. If the URL is in the format of *.zoho.com (where * indicates the name of a Zoho Application such as crm, people, one), then your data is stored in the US(United States) DC.

2. If the URL is in the format of *.zoho.eu, then your data is stored in the EU(European) DC.

3. If the URL is in the format of *.zoho.in, then your data is stored in the IN(Indian) DC.

4. If the URL is in the format of *.zoho.com.au, then your data is stored in the AU(Australian) DC.

5. If the URL is in the format of *.zoho.jp, then your data is stored in the JP(Japan) DC.

Will Zoho employees have access to our data and what data will they have access to?

Access to your data is restricted to a small number of employees on a need-to-know basis in order to provide you technical support. This access is reviewed periodically.

Is data stored on Zoho cloud products encrypted?

We encrypt customer data both in transit and at rest. Data at rest is encrypted using industry-standard AES-256. All customer data is encrypted in transit over public networks using Transport Layer Security (TLS) 1.2/1.3 with Perfect Forward Secrecy (PFS) to protect it from unauthorized disclosure or modification. To know more about encryption at Zoho, click here.

If a customer discontinues Zoho service, how long is their data retained ?

We hold the data in your account as long as you choose to use Zoho Services. Once you terminate your Zoho user account, your data will eventually get deleted from active database during the next clean-up that occurs once in 6 months. The data deleted from the active database will be deleted from backups after 3 months.

Click above to learn more about Zoho's Compliances

Does Zoho adhere to Information Security Standards?

We have an Information Security Management System (ISMS) in place derived from ISO standards, which takes into account our security objectives and the risks and mitigations concerning all the interested parties. We have achieved ISO 27001, ISO27017 & ISO27018 certifications to demonstrate our compliance with the standards.

How are passwords for Zoho cloud services stored?

The passwords you use to access Zoho services are stored in a non-reversible encryption scheme. We use bcrypt hashing algorithm with per-user-salt, so that even if our login database was stolen, it would be prohibitively expensive to reverse engineer the passwords.

As a customer of Zoho, what are the additional security options I have to protect my data?

Additional security features that can be availed by customers:

Multi factor Authentication
Configurable password policy
IP restrictions
Role based Access control
Encryption for custom fields
Account activity audit

What certifications does Zoho possess to demonstrate its compliance with standards?

We are ISO 27001, ISO 27017 and ISO 27018 certified. And Zoho is also SOC 2 Type II compliant in Security, Confidentiality, Processing Integrity , Availability, and Privacy. These ISO and SOC audits are conducted annually, covers all the important and essential controls.

Click here or the image above for more details .

Zoho products are designed with security as a top priority. Trusted by over 100 million users worldwide, we ensure that the data you entrust to us remains safe and protected.

With Zoho, your data is always in trusted hands.

Have any other questions? Click here to contact us directly!

FAQ: Zoho's Data Security