Security
Version 1.0 · Effective 2026-09-20
AXON Cloud applies technical and organisational measures to protect data and availability. This is a summary — not a guarantee of absolute security.
1. Baseline measures
- separated tenant / database per customer (multi-tenant isolation)
- HTTPS / TLS for traffic to the service
- application controls (auth, authorisation, CSRF, rate limiting where applicable)
- regular dependency and patch updates
2. Encryption
- In transit: TLS (HTTPS)
- At rest: disk / volume encryption at infrastructure level where available; secrets in config / secret store, not public code
- passwords stored hashed, never in clear text
3. Backup
- regular backups of databases and critical files
- copies stored separately from production runtime
- periodic restore testing per operations schedule
4. Access control
- roles and permissions by module / company
- sessions and (where enabled) 2FA
- infrastructure access limited to authorised admins
- least privilege
5. Audit logs
- logging of material actions (sign-ins, admin changes, GDPR access where the module is active)
- logs retained for a limited period for security and compliance
- internal security digests / alerts where configured
6. Incidents
Suspected personal-data breaches follow internal process and GDPR (notify AZOP / data subjects when required). Contact: [email protected] / [email protected].
7. Customer responsibility
Protect credentials, use strong passwords / 2FA, do not share accounts. See Terms of use.