Trust Center
Security & Compliance at Axix
Axix Technologies operates as a global multi-product cloud platform company. Security, privacy, and compliance are engineered into every platform—from ERP and HCM to CyberDragon.ai and Axix Hawk.
Last updated: June 2026
Enterprise Trust & Security
- ISO 27001 Aligned
- GDPR-Aligned
- 99.9% Uptime SLA
- 256-bit AES Encryption
- Multi-Region Data Residency
Data Encryption Standards
All customer data is encrypted in transit and at rest using industry-standard protocols.
- TLS 1.2+ for all API and web traffic
- 256-bit AES encryption at rest for databases and object storage
- AES-256-GCM for license signing keys on Axix Hawk
- Customer-managed encryption keys available on enterprise plans
Infrastructure Security
Axix cloud platforms are hosted on hardened cloud infrastructure with layered security controls.
- Primary hosting on AWS with Azure and Google Cloud options for private cloud tenants
- Network segmentation, WAF, and DDoS protection at the edge
- Automated patching and continuous security scanning on managed infrastructure
- Multi-region deployment with contractual data residency SLAs
- 99.9% uptime SLA on self-serve cloud products
Security Reporting and Powered by Axix Oryx
We use our own product. Axix Oryx generates continuous automated security reports and dashboards for our production and staging environments and the same platform our customers subscribe to.
- Continuous automated discovery with security reporting dashboards
- Finding-status tracking integrated with Axix engineering workflows
- Annual independent third-party security audits with published findings
- Customer-facing Axix Oryx reports available on CyberDragon.ai Professional plans
GDPR & Data Processing
Axix processes personal data in accordance with GDPR and applicable regional privacy laws.
- Data Processing Agreements (DPA) available for all enterprise customers
- Right to access, rectification, erasure, and portability supported
- Sub-processor list published and updated on request
- EU/UK data residency options on Private Cloud deployments
- Privacy policy and cookie controls at /legal/privacy
Vulnerability Disclosure Policy
We welcome responsible security research from the community.
- Report vulnerabilities to security@axixtechnologies.com
- Please include steps to reproduce, impact assessment, and affected product
- We aim to acknowledge reports within 48 hours
- Coordinated disclosure and we request 90 days before public disclosure
- Researchers acting in good faith will not face legal action
Security Researcher Recognition Program
Axix maintains a responsible disclosure and recognition program for validated security findings.
- Scope: *.axixtechnologies.com production Cloud properties and published APIs
- Out of scope: unauthorized social engineering attempts, unauthorized facility testing, and third-party integrations without authorization
- Recognition based on severity (Critical, High, Medium) and contact the security team for current tiers
- Duplicate reports and known issues are not eligible
- Enterprise customers may request a private disclosure scope for dedicated tenants