Encryption
TLS in transit and encryption at rest for core datastore and object storage.
Access control
Role-based workspace permissions, SSO-ready paths, and audited admin actions.
Infrastructure
Hardened cloud environments, network segmentation, and continuous monitoring.
Privacy by design
Retention controls, per-tenant artifact scoping and clear subprocessors for model data.
Compliance readiness
Policies aligned with SOC 2-style controls; BAAs/DPAs available for eligible plans.
Responsible disclosure
Report issues to security@aikyora.com — we investigate and remediate promptly.
1. Application security
- Secure coding practices and dependency monitoring
- Authentication protections and session management
- API authentication via keys and scoped tokens
- Input validation and abuse-rate protections on public endpoints
2. Geometry & artifact data
Geometry, scripts, drawings and other artifacts are processed only to deliver the modelling workflows you configure. Workspace admins control retention windows and whether intermediate files are stored. Prefer local or on-premise runners when geometry must not leave your network.
3. People & vendors
- Least-privilege access for employees supporting production
- Background checks where legally permitted for relevant roles
- Subprocessors under written agreements with confidentiality and security obligations
4. Incident response
We maintain an incident response process covering detection, containment, remediation, and customer notification when required. If you suspect a security issue in your account, contact security@aikyora.com immediately.
5. Customer responsibilities
- Protect API keys and invite only trusted workspace members
- Choose local or on-premise runners when geometry may not leave your network
- Review integration scopes and rotate credentials periodically
6. Request documentation
Enterprise customers can request a security overview, DPA, or questionnaire support via Contact or security@aikyora.com.
Questions? Contact us or email legal@aikyora.com.