TikTok is committed to addressing national security concerns regarding U.S. user data through its subsidiary, TikTok U.S. Data Security Inc. Established in 2022, this subsidiary employs over 2,000 U.S.-based personnel and implements technical and operational safeguards to enhance transparency and security. It controls access to U.S. user data, content recommendation, and moderation systems, all stored in the secure Oracle Cloud.
U.S. user data is stored in the Oracle Cloud with monitored access, ensuring only approved personnel from USDS can access it. TikTok has established Dedicated Transparency Centers (DTC) that allow trusted third parties, like Oracle and Independent Security Inspectors, to review TikTok’s source code and algorithms. This initiative began with a DTC in Columbia, Maryland, and has expanded to four additional centers in the U.S., U.K., and Australia, enabling comprehensive reviews by over 100 analysts.
Functionality of Transparency Centers
The DTCs facilitate secure inspections of TikTok’s platform, focusing on:
- Algorithms: Ensuring alignment with platform guidelines.
- Mobile App Code: Verifying security and functionality.
- Backend Services: Supporting secure infrastructure.
- Third-Party Libraries: Identifying risks from external code.
The source code used in the mobile app is verified through Oracle's build pipeline, ensuring integrity and traceability.
Security and Intellectual Property Protection
While promoting transparency, the DTCs also protect TikTok’s proprietary technology through:
- Physical Security: 24/7 monitoring and controlled access.
- Digital Safeguards: Tools for data loss prevention and traffic monitoring.
These measures allow independent reviews without compromising TikTok’s intellectual property.
Over the past two years, Oracle has continuously analyzed TikTok’s platform, ensuring the alignment of content surfacing with TikTok’s commitments. This ongoing access demonstrates TikTok’s dedication to building trust through accountability and sets a new standard for transparency in user data protection. TikTok asserts that it has surpassed other platforms in safeguarding U.S. user data.