Apple has confirmed that Google Cloud Platform is one of at least two third-party services it relies upon for storing encrypted iCloud account data, which it notes doesn’t include any user-identifying information.
Apple made the disclosure in the latest version of its iOS Security Guide, which was updated last month. This particular change went unnoticed until it was reported by CNBC‘s Jordan Novet earlier today.
The encrypted chunks of the file are stored, without any user-identifying information, using third-party storage services, such as S3 and Google Cloud Platform.
Previous versions of the iOS Security Guide mentioned Microsoft Azure, but Google Cloud Platform is now listed in its place. Apple also continues to rely on Amazon’s S3 web service for additional storage.
iCloud stores a user’s contacts, calendars, photos, documents, and more, and since each file is broken into chunks and encrypted with AES-128 and SHA-256 keys, storage on Google Cloud Platform shouldn’t be a security concern.
Apple reached a multi-million dollar deal with Google Cloud Platform in 2016, according to reports from CRN and the Financial Times.
Discuss this article in our forums