Trust Center
Security isn’t a feature. It’s the foundation.
Here’s a plain look at how we protect the data your business runs on.
Last reviewed 18 September 2026
Security
Data protection
- Every byte is encrypted at rest (AES-256) and in transit (TLS).
- Backups run automatically and are themselves encrypted.
- Each business's data is isolated at the database level — structurally unreachable by any other business, not just hidden by the interface.
Infrastructure
- Hosted on infrastructure certified to ISO/IEC 27001 and SOC 2 Type II information-security standards.
- DDoS protection and a web application firewall sit in front of every request.
- HTTPS is enforced everywhere — there is no unencrypted path in.
Access control
- Permissions are role-based, down to the individual employee.
- Sessions are re-verified on every request, not trusted from a cached token.
- Administrative actions are logged for audit.
Email authentication
- Outbound email is authenticated with SPF, DKIM, and DMARC.
- This stops attackers from spoofing our domain to phish your team.
Compliance alignment
The infrastructure providers we build on maintain independently audited certifications — including ISO/IEC 27001 and SOC 2 Type II — and hold GDPR-aligned data processing agreements. We choose our infrastructure deliberately so that a high bar for security is the default, not an afterthought.
DPDP-ready. Where our products collect a person’s live location (e.g. tracking a test-drive vehicle), that only ever happens after the individual gives clear, informed consent — never assumed from ordinary use of the app — and they can withdraw it at any time, as easily as they gave it. Location is never collected outside the specific purpose it was consented to.
Frequently asked
Who can access my business's data?
Only your own employees, based on the roles you assign them. If an Auriforce administrator ever needs to access your account for support, it happens through an audited action tied to their identity and a timestamp — never silently.
What happens to my data if I cancel?
Your data is retained for as long as your account is active, plus a reasonable period afterward for legal and accounting purposes. You can request earlier deletion at any time — see our Privacy Policy for details.
Do you offer a Data Processing Agreement (DPA)?
Yes — contact support@auriforce.com and we'll provide one for your review.
Where is my data hosted?
On managed cloud infrastructure rather than our own servers. Specific data-residency details are available on request for customers with regional requirements.
Found a security issue?
We take reports seriously and respond quickly. Reach us directly — no bug-bounty hoops to jump through.
support@auriforce.comWe won’t pursue legal action against good-faith security research conducted in line with this policy — test only against your own account, never access another business’s data, and report what you find before disclosing it publicly.