Data Security / Trust
Security architecture, operational boundaries and responsible disclosure.
Layered controls
AURA uses HTTPS, restrictive public-site headers, server-side secrets, rate limiting, tenant-aware authorization, database RLS/equivalent controls and private storage patterns for sensitive recordings. No website should be described as absolutely secure.
AI governance
Private ERP AI workflows should resolve user, tenant and permission context before retrieval, minimize context shared externally, require human approval for sensitive actions and preserve auditable outcomes. Public AURA AI remains product/pre-sales scoped.
Certification claims
ISO, SOC 2 or similar certifications must not be represented as achieved unless the relevant certification or assurance engagement has actually been completed and remains current.
Security reporting
Send suspected vulnerabilities or incidents to [email protected] with subject Security. Do not include live credentials or full database dumps in the initial message.