Architecture

Four layers between attackers and your data

Every connection is encrypted and every layer checks on its own. If one fails, the others hold.

Data flow

  1. 01

    Devices

    • Two-factor sign-in
    • Single sign-on
    • Sessions that expire
    TLS 1.3

  2. 02

    Edge

    • Application firewall
    • DDoS protection
    • Rate limits per key
    mTLS

  3. 03

    Application

    • Isolated tenants
    • Role based access
    • Audit log of every action
    Private network

  4. 04

    Storage

    • AES-256 at rest
    • Hourly backups
    • EU only
  • Bug bounty programA reward for every reported flaw.
  • Monitoring around the clockAlerts in under two minutes.
  • Keys in an HSMApart from data and staff.
  • Yearly pentestBy an outside firm.