--- source_url: "https://docs.oracle.com/en-us/iaas/autonomous-database-serverless/doc/sercurity-features-overview.html" title: Security Features Overview mirrored_at: 2026-08-28T13:02:22.656Z host: docs.oracle.com cited_in_42a: true mirror_canonical: "https://index.42a.ai/docs.oracle.com/en-us/iaas/autonomous-database-serverless/doc/sercurity-features-overview.html" --- > **Original source:** https://docs.oracle.com/en-us/iaas/autonomous-database-serverless/doc/sercurity-features-overview.html Oracle Autonomous AI Database includes standardized, hardened security configurations that simplify management and lower operational costs across databases. It automatically applies security patches and updates and enforces encryption for data at rest and in transit, helping protect databases and data from costly and potentially severe vulnerabilities and breaches. Autonomous AI Database reflects years of security development and supports the standard security features of the Oracle AI Database including network encryption, privilege analysis, Multifactor Authentication (MFA), centrally managed users, secure applications roles, robust auditing, transparent sensitive data protection, and others. Additionally, Autonomous AI Database adds Database Vault, Data Safe, Label Security, and other advanced security features at no additional cost for all workloads. - Autonomous AI Database meets a broad set of international and industry-specific compliance standards, and as part of Oracle Cloud Infrastructure Autonomous AI Database has achieved attestations for the common compliance frameworks providing an independent assessment of the service's security, privacy, and compliance controls. See [Regulatory Compliance Certification](https://docs.oracle.com/en-us/iaas/autonomous-database-serverless/doc/gs-security-and-authentation-autonomous-database.html#GUID-D620A69C-9B4A-433C-8E30-BAC7167CF241 "Oracle Autonomous AI Database meets a broad set of international and industry-specific compliance standards.") for more information. - Autonomous AI Database applies security patches automatically as soon as they become available. The automated patching process maintains a strong security posture without downtime and is one of the most direct ways to reduce risk. See [Configuration Management](https://docs.oracle.com/en-us/iaas/autonomous-database-serverless/doc/gs-security-and-authentation-autonomous-database.html#GUID-A7891293-C595-4E15-BD27-AD52F36EB741 "Oracle Autonomous AI Database provides standard, hardened security configurations that reduce the time and money managing configurations across your databases.") for more information. - Autonomous AI Database provides end-to-end encryption out of the box for the database, backups, and all network communication. All your data, including backups, are encrypted with AES256. You can use Oracle-managed or customer-managed keys to encrypt your data. See [Manage Encryption Keys on Autonomous AI Database](https://docs.oracle.com/en-us/iaas/autonomous-database-serverless/doc/autonomous-encrypt-set-rotate-keys.html#GUID-0795135D-B057-4DBC-92C9-368AF4C82D0A "Describes how to use customer-managed encryption keys with Autonomous AI Database, and if you are using customer-managed encryption keys, shows how to rotate the keys, switch to Oracle-managed encryption keys, or view the encryption key history.") for more information. - Autonomous AI Database is automatically configured to use industry-standard Transport Layer Security (TLS) to encrypt data in transit between the database service and clients or applications. You can use mutual TLS or one-way TLS connections. See [Secure Connections to Autonomous AI Database with mTLS or with TLS](https://docs.oracle.com/en-us/iaas/autonomous-database-serverless/doc/connect-introduction.html#GUID-C0F28C43-723B-4E23-84A4-1A1490C80CF6 "Connections to Autonomous AI Database are made either over the public Internet, optionally with Access Control Rules (ACLs) defined, or using a private endpoint inside a Virtual Cloud Network (VCN) in your tenancy."). - Autonomous AI Database provides several options to control client access to your database. You can use public endpoints with access control lists to specify which clients can connect. You can also use private endpoints to place the database in your VCN and use security lists and network security groups to control access to the database. See [Client Access Control](https://docs.oracle.com/en-us/iaas/autonomous-database-serverless/doc/gs-security-and-authentation-autonomous-database.html#GUID-54787674-8354-4183-8642-066C5C762511 "Client access control for an Autonomous AI Database instance is enforced by network access control policies, through client connection protocols, and by the access rights of the database user the client uses to connect.") for more information. - Autonomous AI Database provides automatic backups to ensure data reliability and recoverability. All backups taken and managed by Oracle are immutable that cannot be tampered with by the users in your tenancy. See [About Backup and Recovery on Autonomous AI Database](https://docs.oracle.com/en-us/iaas/autonomous-database-serverless/doc/backup-intro.html#GUID-3BF27FDE-F847-4A86-9C8B-4ED9B0C1D1B2 "Describes Autonomous AI Database backup options.") for more information. - Autonomous AI Database provides several user authentication methods. You can use local database user names and passwords with optional Multifactor Authentication (MFA), which requires an additional verification step, or external authentication methods, including: - Oracle Cloud Infrastructure Identity and Access Management - Microsoft Active Directory - Azure Active Directory - Kerberos See [Use Multifactor Authentication with Autonomous AI Database](https://docs.oracle.com/en-us/iaas/autonomous-database-serverless/doc/multifactor-authentication-autonomous-ai-database.html#GUID-E5B722F2-23F4-4E74-91B1-4A33CD6EDF00 "Multifactor Authentication (MFA) is a method of authentication that requires the use of more than one factor to verify a user's identity to gain access to a resource.") and [Manage Users](https://docs.oracle.com/en-us/iaas/autonomous-database-serverless/doc/manage-users.html#GUID-58DABEA3-9A17-4AA4-B32C-C0E301678A9E "Describes administration tasks for managing database users on Autonomous AI Database.") for more information. - Separation of duties is automated since the direct access to the database node and local file systems has been removed. Additional separation is provided through Oracle Database Vault. These unique security controls restrict access to application data reducing the risk of insider and outsider threats. Oracle Database Vault can be configured to control access to specific schemas from privileged database users such as the ADMIN user. See [Use Oracle Database Vault with Autonomous AI Database](https://docs.oracle.com/en-us/iaas/autonomous-database-serverless/doc/autonomous-database-vault.html#GUID-70F233AF-458F-44B7-9418-F9AF70CFDD15 "Oracle Database Vault implements powerful security controls for your database. These unique security controls restrict access to application data by privileged database users, reducing the risk of insider and outside threats and addressing common compliance requirements.") for more information. - Autonomous AI Database provides robust auditing capabilities that enable you to track who did what on the service and on specific databases. There are policies preconfigured that monitor privileged user activity and logon failures. You can configure additional database auditing to audit all actions, such as access to specific objects, schema changes, logons by specific users, and much more. See [Auditing Overview on Autonomous AI Database](https://docs.oracle.com/en-us/iaas/autonomous-database-serverless/doc/gs-security-and-authentation-autonomous-database.html#GUID-C1833338-A9D9-4F47-A99F-B7D5E498DF4B "Oracle Autonomous AI Database provides robust auditing capabilities that enable you to track who did what on the service and on specific databases. Comprehensive log data allows you to audit and monitor actions on your resources, which helps you to meet your audit requirements while reducing security and operational risk.") for more information. - Data Safe monitors and assesses the secure configuration of the Autonomous AI Database. Data Safe helps evaluate data risks, discovers sensitive data, implement and monitor security controls, assesses user security and addresses data security compliance requirements and configuration drift. See [Use Oracle Data Safe with Autonomous AI Database](https://docs.oracle.com/en-us/iaas/autonomous-database-serverless/doc/autonomous-data-safe.html#GUID-C8A06005-1EF4-4CE7-89E6-A43E69074BAD "Provides information on using Oracle Data Safe on Autonomous AI Database.") for more information. - SQL Firewall is available with Autonomous AI Database to protect against risks like SQL injection attacks and compromised accounts. SQL Firewall is managed for your database with Data Safe and built into the Oracle AI Database 26ai kernel, where it inspects all incoming database connections and SQL statements. See [About SQL Firewall](https://docs.oracle.com/en/cloud/paas/data-safe/udscs/sql-firewall-overview.html#GUID-C778020E-CEC5-4347-B77F-4350195F1AC5) for more information. - Oracle Cloud Operators do not have authorization to access your data or any other information in your database schemas. When access to your database schemas is required to troubleshoot or mitigate an issue, you can allow a cloud operator to access your Autonomous AI Database schemas for a limited time. See [Manage Oracle Cloud Operator Access](https://docs.oracle.com/en-us/iaas/autonomous-database-serverless/doc/autonomous-operator-access.html#GUID-B34B2D28-EE71-4738-9EBD-263BF77C628D "Describes how to grant temporary access to your database for an Oracle Cloud Operator.") for more information. - Autonomous AI Database is governed by the Oracle Cloud Hosting and Delivery Policies which explain the Oracle Cloud Security Policy. See the Delivery Policies area on [Oracle Contracts](https://www.oracle.com/corporate/contracts/cloud-services) for more information. - Autonomous AI Database is subject to the Oracle Cloud Security Testing policy, which describes when and how you may conduct certain types of security testing of Oracle Cloud Infrastructure services, including vulnerability and penetration tests and tests involving data scraping tools. See [Security Testing Policies on Autonomous AI Database](https://docs.oracle.com/en-us/iaas/autonomous-database-serverless/doc/autonomous-security-testing-policies.html#GUID-A953378A-99A1-42BB-AD55-7AED503C454E "Autonomous AI Database is subject to the Oracle Cloud Security Testing policy which describes when and how you may conduct certain types of security testing of Oracle Cloud Infrastructure services, including vulnerability and penetration tests, as well as tests involving data scraping tools.") for more information.