Trust Center
Security & Compliance at Axix
Axix Technologies operates as a global multi-product SaaS company. Security, privacy, and compliance are engineered into every platform — from ERP and HCM to CyberDragon.ai and Axix Hawk.
Last updated: June 2026
Enterprise Trust & Security
- ISO 27001 Aligned
- GDPR Compliant
- 99.9% Uptime SLA
- 256-bit AES Encryption
- Multi-Region Data Residency
Data Encryption Standards
All customer data is encrypted in transit and at rest using industry-standard protocols.
- TLS 1.2+ for all API and web traffic
- 256-bit AES encryption at rest for databases and object storage
- AES-256-GCM for license signing keys on Axix Hawk
- Customer-managed encryption keys available on enterprise plans
Infrastructure Security
Axix SaaS platforms are hosted on hardened cloud infrastructure with layered security controls.
- Primary hosting on AWS with Azure and Google Cloud options for private cloud tenants
- Network segmentation, WAF, and DDoS protection at the edge
- Automated patching and continuous security scanning on managed infrastructure
- Multi-region deployment with contractual data residency SLAs
- 99.9% uptime SLA on self-serve SaaS products
Security Assessments — Powered by Axix VulnScan
We use our own product. Axix runs continuous automated security assessments on our production and staging environments using Axix VulnScan — the same platform our customers subscribe to.
- Continuous automated discovery and security assessment
- Remediation tracking integrated with Axix engineering workflows
- Annual third-party security assessments by independent assessors
- Customer-facing Axix VulnScan reports available on CyberDragon Professional plans
GDPR & Data Processing
Axix processes personal data in accordance with GDPR and applicable regional privacy laws.
- Data Processing Agreements (DPA) available for all enterprise customers
- Right to access, rectification, erasure, and portability supported
- Sub-processor list published and updated on request
- EU/UK data residency options on Private Cloud deployments
- Privacy policy and cookie controls at /legal/privacy
Vulnerability Disclosure Policy
We welcome responsible security research from the community.
- Report vulnerabilities to security@axixtechnologies.com
- Please include steps to reproduce, impact assessment, and affected product
- We aim to acknowledge reports within 48 hours
- Coordinated disclosure — we request 90 days before public disclosure
- Researchers acting in good faith will not face legal action
Security Researcher Recognition Program
Axix maintains a responsible disclosure and recognition program for validated security findings.
- Scope: *.axixtechnologies.com production SaaS properties and published APIs
- Out of scope: unauthorized social engineering attempts, unauthorized facility testing, and third-party integrations without authorization
- Recognition based on severity (Critical, High, Medium) — contact the security team for current tiers
- Duplicate reports and known issues are not eligible
- Enterprise customers may request a private disclosure scope for dedicated tenants