Security & trust
Security engineering, documented honestly
AUREXIS is built around tenant isolation, least privilege and append-only audit records. We describe what is implemented; we do not claim certifications the platform has not obtained.
Platform controls
Tenant isolation
Every tenant-owned table carries organisation_id. PostgreSQL row level security is enabled with policies evaluated against a transaction-local setting, and the API connects as a role that cannot bypass RLS. Cross-tenant IDs return 404.
Authentication
Argon2 password hashing, 12-character policy with complexity, short-lived access tokens, rotating refresh tokens with reuse detection, TOTP MFA and CSRF double-submit protection.
Authorisation
Nine built-in roles and validated custom roles. Permissions are checked server-side on every route; portal roles cannot receive internal permissions.
Evidence handling
Extension and MIME allow-list, magic-byte validation, size limits, EICAR/antivirus screening hook, randomised object keys, AES-256 server-side encryption and 5-minute presigned downloads.
AI safety
Retrieval is filtered by organisation at the database layer. System prompts prohibit fabricated compliance claims. Agents cannot perform destructive actions; proposals require human approval.
Audit trail
Append-only audit_logs with an UPDATE/DELETE trigger and revoked privileges for the runtime role. Correlation IDs are returned to clients and logged with structured JSON.
Secrets
Database, Redis, object storage and Microsoft credentials come from environment variables. Integration tokens are encrypted with Fernet before storage. API keys are stored only as hashes.
Operations
Docker Compose with health checks, restart policies, internal-only data network, persistent volumes, migrations, backup and restore scripts, and a non-root application user.
Reporting a vulnerability
Report suspected vulnerabilities to security@aurexis.example with reproduction steps. Do not access customer data, test against production tenants, or run destructive tests. We acknowledge reports within two business days and coordinate disclosure after remediation.
The public Trust Center for each customer is generated by the platform. A demo tenant is available at /trust/aurexis-demo.