Security
Security at Aminyx.
How we protect workspace data, agent workflows, and customer operations on the platform.
How we secure the platform
Controls that apply toevery workspace.
Encryption in transit
TLS 1.2+ for all client and API traffic.
Encryption at rest
Workspace data encrypted on enterprise cloud infrastructure.
Access control
Role-based access inside the product; production access is restricted and audited.
Availability
Redundant hosting, automated backups, and monitored uptime.
Vulnerability management
Regular vulnerability assessment and dependency monitoring.
Incident response
Documented process for detection, containment, and customer communication.
Standards and certifications
Where we standtoday.
GDPR
Status: AlignedData protection practices aligned with EU requirements.
SOC 2 Type II
Status: In progressIndependent security audit — in progress.
ISO 27001
Status: PlannedInformation security management — planned.
PCI DSS
Status: ConditionalApplicable when payment features are enabled.
AI and agent security
How model accessis governed.
Workspace isolation
Workspace data is isolated per customer.
Model providers
Third-party model calls are governed by contractual data-processing terms.
You control the input
You control what content is sent to agents.
Auditable output
Outputs are logged for audit within your workspace where applicable.
Responsible disclosure
Found something?Tell us.
Report a suspected vulnerability to our security team. Please give us a reasonable window to investigate and remediate before any public disclosure.