Security Policy
Last updated August 29, 2026
Security practices and responsible disclosure for the Auroranexis platform operated by Auroranexis AI Solutions.
Last updated August 29, 2026
Security practices and responsible disclosure for the Auroranexis platform operated by Auroranexis AI Solutions.
Auroranexis AI Solutions (Althütte, Germany) maintains administrative, technical, and organizational measures appropriate for a B2B SaaS platform processing customer operational data.
Data is encrypted in transit using TLS. Underlying cloud platform stores (database and object storage) typically provide provider-managed encryption at rest as configured for the production project; Auroranexis does not claim additional application-layer encryption at rest beyond those platform controls. Access to production systems is limited to authorized personnel on a need-to-know basis with role-based controls, authentication requirements, and audit logging. Customer workspaces are logically isolated.
We monitor for security events and maintain procedures to investigate and respond to incidents. Customers are notified of personal data breaches affecting their data without undue delay where required by law and contract.
Report security vulnerabilities to security@auroranexis.com. Follow the Vulnerability Disclosure Policy at /security/vulnerability-disclosure. Provide sufficient detail to reproduce the issue. Do not perform destructive testing, social engineering, or physical attacks without prior written authorization. Operational acknowledgment target: within two business days (not a contractual guarantee).
We align with recognized security frameworks and describe readiness for standards such as ISO 27001 where applicable. We do not claim formal certifications unless explicitly published in a current, valid attestation document.
Security: security@auroranexis.com. Legal: legal@auroranexis.com. Support: support@auroranexis.com.