# Security

## Security

The Hugging Face Hub offers several security features to ensure that your code and data are secure. Beyond offering [private repositories](https://huggingface.co/docs/hub/repositories-settings#private-repositories) for models, datasets, and Spaces, the Hub supports access tokens, commit signatures, and malware scanning.

Hugging Face is GDPR compliant. If a contract or specific data storage is something you’ll need, we recommend taking a look at our [Expert Acceleration Program](https://huggingface.co/support). Hugging Face can also offer Business Associate Addendums or GDPR data processing agreements through an [Enterprise Plan](https://huggingface.co/pricing).

Hugging Face is also [SOC2 Type 2 certified](https://us.aicpa.org/interestareas/frc/assuranceadvisoryservices/aicpasoc2report.html), meaning we provide security certification to our customers and actively monitor and patch any security weaknesses.

![](https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/hub/security-soc-1.jpg)

For any other security questions, please feel free to send us an email at <security@huggingface.co>.

### Contents

* [User Access Tokens](https://huggingface.co/docs/hub/security-tokens)
* [Git over SSH](https://huggingface.co/docs/hub/security-git-ssh)
* [Signing commits with GPG](https://huggingface.co/docs/hub/security-gpg)
* [Single Sign-On (SSO)](https://huggingface.co/docs/hub/security-sso)
* [Malware Scanning](https://huggingface.co/docs/hub/security-malware)
* [Pickle Scanning](https://huggingface.co/docs/hub/security-pickle)
* [Secrets Scanning](https://huggingface.co/docs/hub/security-secrets)
