ECP Data Bridge Security and Data Handling

ECP Data Bridge protects application credentials and OCI authentication keys but does not inspect or encrypt the contents of transferred files.

ECP Data Bridge uses secure storage for the credentials and authentication keys required for local access, source connections, and OCI Object Storage uploads.

Credential protection

SMB passwords and FTP source passwords are stored by using the secure secret mechanism available on the Cloud Connector. ECP Data Bridge does not store these passwords in plaintext in application configuration, files, logs, database records, API responses, or exported logs.

The ECP Data Bridge local UI and application APIs use HTTPS with a self-signed certificate. SMB version 3 is supported for access to the local network share.

OCI authentication keys

ECP Data Bridge generates a public and private key pair when the application starts. The key pair is stored in the secure vault.

The local UI displays the public key and its fingerprint. Copy or download the public key and register it with the OCI user used for Object Storage access. The private key is not provided through the UI.

Limit the OCI IAM policy associated with the key to the Object Storage bucket and operations required by ECP Data Bridge. Avoid broad tenancy-level, compartment-wide, or administrative Object Storage permissions unless they are required and have been approved.

File-content protection

Files downloaded to the Cloud Connector are stored in the local storage allocated to ECP Data Bridge. ECP Data Bridge does not provide application-level encryption at rest for these files.

Apply encryption at the source before initiating a transfer when the files contain sensitive information or when encryption is required by an organizational security policy.

ECP Data Bridge treats source files as trusted. It does not:

  • Scan transferred files for malware.

  • Inspect or validate the business content of a file.

  • Transform, parse, or compress files during transfer.

The contents and folder structure of the selected source are transferred without business-content processing by ECP Data Bridge.