segmentio · bot-docsteam · Oct 22, 2021 · Oct 20, 2021 · Oct 21, 2021 · Oct 21, 2021
@@ -87,10 +87,13 @@ database shortly.
 If your Db2 Warehouse is in a private network, be sure to [whitelist
 Segment's IP
 address](https://segment.com/docs/connections/storage/warehouses/faq/#which-ips-should-i-whitelist).
-Otherwise, we will not be able to load your data.
+Otherwise, Segment can't load your data.
 
 ### Unique User
 
-We strongly recommend creating a unique User for the Segment Db2 Warehouse
+Segment recommends you to create a unique User for the Segment Db2 Warehouse
 connection to your Db2 Warehouse instance so that you can manage permissions
 separately.
+
+### SSL/TLS
+Always require SSL/TLS and make sure your data warehouse can only accept secure connections. Segment only connects to your data warehouse using SSL/TLS.
@@ -4,7 +4,7 @@ rewite: true
 redirect_from:
   - '/connections/warehouses/catalog/postgres/'
 ---
-PostgreSQL, or Postgres, is an object-relational database management system (ORDBMS) with an emphasis on extensibility and standards compliance. As a database server, its primary functions are to store data securely and return that data in response to requests from other software applications. 
+PostgreSQL, or Postgres, is an object-relational database management system (ORDBMS) with an emphasis on extensibility and standards compliance. As a database server, its primary functions are to store data securely and return that data in response to requests from other software applications.
 
 PostgreSQL is ACID-compliant and transactional. PostgreSQL has updatable views and materialized views, triggers, foreign keys; supports functions and stored procedures, and other expandability. Developed by the PostgreSQL Global Development Group, free and open-source.
 
@@ -45,7 +45,7 @@ This guide explains how to set up a Postgres database with Heroku. Heroku is a c
 
     When you click **Create Database**, a modal appears with your plan choices. Depending on your needs, some plans may be more suitable than others - for example, more expensive plans generally have better performance and more storage. Segment recommends that new customers start with the "Standard 4" plan.
 
-    For the fastest sync times, choose the US East region. 
+    For the fastest sync times, choose the US East region.
 
     After you configure these settings, click "Login to Install" and/or "Visit Heroku Dashboard to create your first app".
 
@@ -354,10 +354,11 @@ GRANT CREATE, TEMPORARY ON DATABASE <enter database name here> TO segment;
 
 
 ## Security
-Make sure you're logging in with a user that has read and write permissions so that we can write to your database.
-
-- Whitelist the Segment IP (`52.25.130.38/32`)
+To make sure your Postgres database is secure:
+- Log in with a user that has read and write permissions so that Segment can write to your database.
+- Whitelist the Segment IP (`52.25.130.38/32`). Otherwise, Segment can't load your data.
 - Create a service user that has `read/write` permissions.
+- Always require SSL/TLS and make sure your data warehouse can only accept secure connections. Segment only connects to your data warehouse using SSL/TLS.
 
 ## Best Practices
 

@@ -65,8 +65,13 @@ After creating a Redshift warehouse, the next step is to connect Segment:
 4. Select which sources and collections/properties will sync to this Warehouse
 
 ## Security
+
+### VPC
 VPCs keep servers inaccessible to traffic from the internet. With VPC, you're able to designate specific web servers access to your servers.  In this case, you will be whitelisting the [Segment IPs](/docs/connections/storage/warehouses/faq#which-ips-should-i-whitelist) to write to your data warehouse.
 
+### SSL/TLS
+Always require SSL/TLS and make sure your data warehouse accepts only secure connections. Segment only connects to your data warehouse using SSL/TLS.
+
 ## Best practices
 
 ### Networking