Enterprise security, no compromises.
Your data stays in your cloud tenant — by architecture, not just policy.
Security model
Four-layer defence in depth.
Data Encryption
All data encrypted at rest (AES-256) and in transit (TLS 1.3). Encryption keys are managed in your Azure Key Vault or AWS KMS — Daxor staff have zero access.
- AES-256 at rest
- TLS 1.3 in transit
- Customer-managed keys (BYOK)
- Database-level column encryption for PII
Access Control
Role-based access control enforced at every layer. SSO via Azure AD, Okta, or Google Workspace. MFA mandatory for all privileged accounts.
- RBAC + attribute-based policies
- SSO with SAML 2.0 / OIDC
- MFA enforced for admin roles
- Session timeout & IP allowlisting
Audit & Compliance
Immutable audit logs for every action — who read what, when, and from where. Tamper-proof, stored separately from operational data.
- Immutable audit trail (all actions)
- SOC 2 Type II (in progress)
- ISO 27001 certified
- GDPR & DPDPA compliant
Infrastructure Security
Deployed in your cloud tenant — your data never leaves your VPC. Regular penetration tests by independent third parties.
- Single-tenant deployment
- VPC / private networking only
- Annual third-party pen tests
- Vulnerability scanning (weekly)
Compliance
Certifications & standards.
ISO 27001
CertifiedInformation Security Management
SOC 2 Type II
In ProgressSecurity & Availability
GDPR
CompliantEU Data Protection
DPDPA 2023
CompliantIndia Data Protection Act
GST / TDS
CompliantIndia Tax Compliance
Ind AS / IFRS
CompliantAccounting Standards
Incident response
SLA-backed response times.
| Severity | Response SLA | Examples |
|---|---|---|
| Critical | < 1 hour | Data breach, complete outage |
| High | < 4 hours | Partial outage, auth failure |
| Medium | < 24 hours | Performance degradation |
| Low | < 72 hours | UI bugs, minor feature issues |
Need our security documentation?
We provide a full security pack including pen test reports, ISO certificate, and data processing agreements on request.
Request security pack