The Unloc Cloud runs on Google infrastructure, using Google Cloud’s security model. Google’s security model includes denial-of-service attack defences and encryption of all data in transit. 

Unloc uses Google’s Identity Services for user authentication. In particular, Unloc users are identified by their mobile phone numbers in E164 (international) format. Unloc does not accept any other authentication than phone numbers, and hence no passwords are stored. Phone numbers are verified by a 6-digit SMS-code sent by Google.