Shared Responsibility Model

Zoho’s shared responsibility model explains which security tasks Zoho takes care of for Zoho Creator, and which ones sit with your business as the account owner. Understanding this split is a useful starting point before you build applications that handle sensitive or personal data.

How responsibility is split

Zoho secures the cloud infrastructure, platform software and data centres that Zoho Creator runs on. Your business is responsible for how you configure your applications, manage user access, and handle the data you collect, including meeting your own compliance obligations.

What this section covers

The following article sets out Zoho’s and the customer’s responsibilities in more detail, covering infrastructure, access control, application design, encryption and monitoring.

Frequently asked questions

Is Zoho or the customer responsible for encrypting data in Zoho Creator?

Both. Zoho encrypts data in transit and provides encryption tools, but you are responsible for enabling encryption on sensitive fields within your own application.

Who handles physical security of the servers Zoho Creator runs on?

Zoho. It secures the data centres and infrastructure, while you are responsible for how your application and users are configured.

Need help?

Need help understanding your security responsibilities in Zoho Creator? Contact support@thoughtlogik.com or see our Zoho support services.