Security Without Compromise
Zero-knowledge architecture ensures we cannot access your data, by design. Your keys. Your data. Your control.
Security Principles
Our security architecture is built on foundational principles that protect your data at every layer.
Zero-Knowledge Architecture
Your data is encrypted with keys only you control. We cannot access your information: by design, not by policy.
Complete Transparency
Full audit trails for every action. No black boxes. You maintain visibility into all system operations.
Defense in Depth
Multiple security layers ensure no single point of failure. Security is built into every component.
Data Sovereignty
Your data never leaves your control. Deploy on-premises, air-gapped, or in your private cloud.
Security Standards
Industry-standard security practices implemented across the platform.
End-to-End Encryption
AES-256 encryption at rest, TLS 1.3 in transit
Zero-Knowledge Storage
Client-side encryption with user-controlled keys
Role-Based Access Control
Granular permissions with principle of least privilege
Comprehensive Audit Logging
Immutable logs for all system actions
Air-Gap Deployment
Full functionality with zero network connectivity
Multi-Factor Authentication
Hardware key and authenticator app support
Compliance Frameworks
Control catalogs the platform tracks for your audit. Automated checks cover the controls where the platform holds the evidence. Your team verifies the rest, with evidence attached. These describe product capability, not Aethyr certifications. Aethyr's own SOC 2 Type I is in preparation, and no report has been issued yet.
SOC 2
50 controls mapped, 3 checked automatically
HIPAA
20 safeguards mapped, 3 checked automatically
GDPR
25 controls mapped, 2 checked automatically
CMMC Level 2
All 110 practices with SPRS scoring and a POA&M, verified by your team
FedRAMP
Partial catalog: 6 of the Moderate baseline controls so far