Leading Remote Connectivity Platform
Securely Connecting People, Places, and Things
TeamViewer provides remote access, remote support, and online collaboration capabilities with the level of security and privacy necessary for organizations to remain HIPAA compliant.
Service Organization Controls 2 (SOC2) is a reporting framework for service organizations to report on non-financial internal controls for the five Trusted Service Principles (TSP). These principles include system security, availability, processing integrity, confidentiality, and privacy.
Data and Program Encryption
TeamViewer includes encryption based on 2048 RSA private/public key exchange and AES (256-bit) session encryption. This technology is based on the same standards as https/SSL and meets today’s standards for security. The key exchange also guarantees full client-to-client data protection. This means that even our routing servers are not able to read the data stream. All program files are secured using DigiCert code signing technology. This allows you to verify the origin of the executable tactics you have received.
TeamViewer assists companies with their HIPAA and PCI compliance requirements. Two-factor authentication adds an additional security layer to protect accounts from unauthorized access. With two-factor authentication, a code is generated on your mobile device, in addition to asking for a username and password, to sign in to a TeamViewer account. The code is generated via the time-based one-time password (TOTP) algorithm.
File Transfer and Invisible Access Protection for Support Sessions
In addition to the Partner ID, TeamViewer generates a session password that changes with every software start to provide additional security against unauthorized access to a remote system. Security functions like file transfer require additional, manual confirmation from the remote partner. It’s also not possible to invisibly control a computer. For data protection reasons, the user has to be able to detect when someone is accessing the machine.
Trusted Device Challenge and Confirmation Process
The TeamViewer Trusted Device measure gives our customers even more protection and helps prevent anyone else from accessing the account. This feature ensures that whenever an existing TeamViewer account attempts to sign in on any given device for the first time, we ask to confirm the new device as trusted device before signing in. An in-app notification requests approval to the device via a link sent to the account’s email address.
Enforced Password Reset on Unusual Activity
The system continuously determines if a TeamViewer account shows unusual behavior (e.g. access from a new location) that might suggest it has been compromised. When that’s the case, to safeguard data integrity, TeamViewer accounts are marked for an enforced password reset. An email with instructions to reset your password is then sent from TeamViewer.