Security Policy
Data Protection
Encryption in Transit (TLS 1.2+) and at Rest (AES-256)
Secure AWS Cloud Hosting (SOC 2 / ISO 27001 compliant)
Logical Data Isolation in Multi-Tenant Architecture
Application Security
- OWASP Top 10 Compliance
- Role-Based Access Control (RBAC), SSO, and optional 2FA
- Comprehensive Audit Trails for User Activity
Infrastructure & Network Security
Firewall, DDoS Mitigation (via Cloudflare), and IP Whitelisting
Staging & Production Environment Isolation
Regular Vulnerability Scanning & Patching
Operational Security
Least Privilege Access Policy for Employees
Mandatory Security
Training for Staff
Documented and Practiced Incident Response Plans
Compliance & Privacy
- GDPR Compliant Data Practices
- Data Residency Options for Enterprise Clients
- Third-party Penetration Testing & Security Audits
Customer Controls & Transparency
Self-service Data Export in Standard Formats
Daily Backups with 30-Day Retention & Redundancy
Live System Monitoring at status.rubikx.store