Enterprise-Grade Security
Secure by Design.
Zero Trust Architecture.
TwinPane is built from the ground up to operate securely in restrictive enterprise environments. We prioritize data privacy, encryption, and compliance.
Core Security Principles
Our security model ensures that your data never leaves your controlled environment unencrypted, and we never have access to your files.
End-to-End Encryption
All data transfer between the TwinPane Client (Local PC) and Server (Remote Session) occurs over a securely encrypted channel. We use industry-standard TLS 1.3 encryption for all data in transit.
No Data Persistence
TwinPane does not store, cache, or inspect your files on our servers. The backend facilitates the secure connection and transfer of data between endpoints, but the transfer is transient and encrypted. Our servers only retain license validation records and anonymous telemetry.
Code Signing
All TwinPane executables and installers are digitally signed with an OV Code Signing Certificate, ensuring the integrity and authenticity of the software you run.
Infrastructure Security
Our backend infrastructure is hosted on secure, compliant cloud providers with strict access controls. Administrative access requires strong MFA and is limited to essential personnel.
User-Context Execution
The TwinPane agent runs in the user's context, not as a system service. This ensures it respects all existing Windows file permissions and ACLs. The application operates solely with the permissions granted to the logged-in user.
Independent File Connection
TwinPane transfers files through its own encrypted connection between the remote host and local PC, outside RDP and ICA. It does not use drive or clipboard redirection. IT should review TwinPane deployment requirements alongside existing network and file-access policies.
Admin controls
One policy for every device
Decide which file types may open locally, cap file sizes, require a Microsoft Defender scan and limit access to user folders. Every Client and Server follows the same rules.
Set the rules once
Allowed file types, maximum file size, Defender scanning, Mirror Mode, network drive sharing and folder access.
Enforced on every PC
Users see that their organization manages TwinPane, and get a clear message when a file is blocked.
Backend & Data Privacy
License Validation
The only communication with our public servers happens during license activation and periodic checks. We transmit a hashed hardware ID and your license key over HTTPS. No file metadata, filenames, or user content is ever sent to our servers.
Payment Security
We use Paddle as our Merchant of Record. Paddle is fully PCI-DSS compliant. TwinPane does not collect, store, or process any credit card or banking information directly.
GDPR Compliance
We are a European company and fully committed to GDPR compliance. You have the right to request data export or deletion of your account information at any time. Our data processing agreement (DPA) is available upon request for enterprise customers.