Security Without Compromise
Zero-knowledge architecture ensures we cannot access your data, by design. Your keys. Your data. Your control.
Security Principles
Our security architecture is built on foundational principles that protect your data at every layer.
Zero-Knowledge Architecture
Your data is encrypted with keys only you control. We cannot access your information: by design, not by policy.
Complete Transparency
Full audit trails for every action. No black boxes. You maintain visibility into all system operations.
Defense in Depth
Multiple security layers ensure no single point of failure. Security is built into every component.
Data Sovereignty
Your data never leaves your control. Deploy on-premises, air-gapped, or in your private cloud.
Security Standards
Industry-standard security practices implemented across the platform.
End-to-End Encryption
AES-256 encryption at rest, TLS 1.3 in transit
Zero-Knowledge Storage
Client-side encryption with user-controlled keys
Role-Based Access Control
Granular permissions with principle of least privilege
Comprehensive Audit Logging
Immutable logs for all system actions
Air-Gap Deployment
Full functionality with zero network connectivity
Multi-Factor Authentication
Hardware key and authenticator app support
Compliance Frameworks
Controls the platform enforces as code, so evidence is collected continuously for your audit. These describe product capability, not Aethyr certifications. Aethyr's own SOC 2 Type I audit is in progress.
SOC 2
37 enforced controls with real-time monitoring
HIPAA
21 enforced controls for PHI protection
GDPR
26 enforced controls for data subject rights
NIST 800-53
Federal security control framework
FedRAMP
Architecture mapped to the Moderate baseline