[FAQ-E] - Security & Access Control – Frequently Asked Questions about Nebula Platform Security and Staff Access

This section addresses the most common user concerns about data protection, staff permissions, and privacy compliance within Zyxel Nebula.

❓ How does Zyxel protect the Nebula platform from attacks and data breaches?

Users often ask how secure Nebula is from cyber threats.
Answer:
Nebula uses a layered "defense-in-depth" architecture, along with AWS cloud-native security features such as automated threat detection, centralized monitoring, and incident response. This significantly minimises risks and helps maintain a strong security posture.

❓ Can Zyxel support access to my organisation or make changes without permission?

Many users want to be sure Zyxel cannot modify anything behind their backs.
Answer:
No. Zyxel support engineers cannot access or change anything in your Nebula organisation unless you explicitly invite them via the “Invite Zyxel support as administrator” option. All actions require your consent.

❓ Does Zyxel comply with GDPR, and where is my data stored?

Data privacy and compliance are among the most common user concerns.
Answer:
Yes, Zyxel is GDPR-compliant. All Nebula data is securely stored in AWS data centers located in Ireland.
📄 Read our GDPR Data Processing Agreement