Security Statement

1. Overview

Security is foundational to Awarify's platform and operations. We design and operate our systems using a defense-in-depth approach, combining strong technical controls with disciplined processes to maintain the confidentiality, integrity, and availability of personal information.

2. Technical Measures

We employ modern encryption for data in transit and at rest, segregate production, staging, and development environments, and maintain continuous hardening and patching practices. Where appropriate, we use automated monitoring to detect anomalous activity and maintain secure secrets management for service credentials.

• TLS for all web traffic and encrypted storage for relevant data at rest
• Environment separation and least-privilege network access
• Continuous monitoring and remediation of vulnerabilities

3. Administrative Measures

Access to personal information is limited to authorized personnel who require it to fulfill their duties. We implement role-based access control, enforce strong authentication, and maintain internal policies for secure handling of data. Team members are subject to confidentiality obligations and receive periodic security awareness training aligned with their responsibilities.

• Role-based access and need-to-know authorization
• Documented security and incident response procedures
• Periodic training and control reviews

4. Infrastructure and Compliance

Awarify is hosted on reputable cloud providers that operate secure, access-controlled facilities and hold widely recognized security certifications (for example, ISO 27001 and SOC 2). We align our internal controls with industry best practices and regularly assess our posture to address evolving threats.

5. Incident Response

We maintain an incident response process designed to rapidly investigate, contain, and remediate security events. Where personal data is affected and notification is required by law, we will notify impacted individuals and relevant authorities without undue delay.

6. Contact

To report a security concern or request additional details about our security program, contact support@awarify.io.