Security at AIGiner
Here's how we protect what you entrust to us: defence in depth, least privilege and your project data kept in the European Union.
No single measure works alone
Every layer assumes the one before it can fail. This is how we protect your data from the edge to the database.
Edge and WAF
Cloudflare with an active WAF, rules against known scanners and an automatic challenge for suspicious traffic.
Encryption in transit and at rest
HTTPS enforced with HSTS and TLS 1.2+. Sensitive data is encrypted in the database, with the key kept outside the repository.
Per-client isolation
PostgreSQL with row-level security in the most sensitive parts —model usage, billing, approvals, memory, runs and flows— and the per-account filter in the application everywhere else.
Access control
Two-factor authentication on every administrative account, and access to the production server only via SSH key, never a password.
Backups
Daily backups under the 3-2-1 rule (three copies, two media, one off-site) and automatic test restores: weekly for Shara and monthly for the rest.
Monitoring
Automatic monitoring: if something fails, we get an alert.
The rules we don't negotiate
Least privilege
Every person and every system only accesses what it needs to do its job, nothing more.
Data in the European Union
The server, the databases and the inference are in the European Union. Email, payments, part of Cloudflare's traffic, Shara support and the phone assistant's voice leave it, and each one is named in the list of subprocessors.
GDPR by design
Compliance isn't bolted on at the end of a project: it's designed in from day one, for every client.
No system is unhackable
Anyone who tells you otherwise is selling you something. Our commitment isn't perfection: it's applying everything we've got to keep things as secure as we possibly can, being honest about what we still lack, and responding fast when something breaks.
Have a specific security question?
Write to us at security@aiginer.com. We answer procurement questionnaires and internal audits without asking for a contract first.