Abstract: Examples described herein relate to securing communication between a cloud platform and applications running on an on-premise private network of a tenant. The cloud platform includes a communication delegate mapped to a tenant of the cloud platform. The communication delegate may receive data traffic associated with the tenant and directed to an application hosted on an on-premise private network. The communication delegate may encrypt the data traffic to generate an encrypted data traffic using a unique certificate associated with the communication delegate and communicate the encrypted data traffic to the application via a secure communication tunnel specific to the tenant between the communication delegate and the on-premise private network.