Security, privacy, and compliance — by design.
Auralytix is built for enterprises and government organizations where data handling and security posture are procurement requirements, not afterthoughts.
Security
- JWT-based authentication with MFA support
- Role-based access control (RBAC) across all portals
- Audit logging for all portal and inquiry actions
- DDoS protection and edge-layer rate limiting
- Data encrypted at rest (AES-256) and in transit (TLS 1.3)
- Penetration testing and quarterly security reviews
Privacy
- Data processed only for stated purposes
- No data sold to third parties
- Right to access, rectify, or delete personal data on request
- Data minimization by design
- Granular cookie consent — nothing beyond strictly necessary loads without your opt-in
Compliance
- HIPAA-ready architecture patterns available for healthcare clients
- GDPR compliance for EU data subjects
- SOC2 posture documentation available on request
- PCI-DSS architecture guidance for payment processing
- Government data handling policies for public sector clients
Data Handling
- Architecture Lab inputs stored to generate shareable reports only
- Contact inquiry data retained for 12 months then deleted
- No personal data used to train AI models
- Subprocessors listed and reviewed annually
- Data residency options available for enterprise clients
Cookie Policy
We use four cookie categories. Only "Necessary" is required — everything else is opt-in, and you can change your choice at any time with the button above.
Keeps you signed in, remembers your cookie choice, and provides basic security. The site can't function without these.
Privacy-friendly traffic analytics (Plausible — no cross-site tracking, no ad identifiers) and first-touch attribution, so we know which channel brought you here.
Remembers non-essential UI choices across visits.
Reserved for potential future use. Nothing is active in this category today regardless of your setting.
Need a security review or compliance documentation?
Enterprise and government clients can request our full security questionnaire, SOC2 posture summary, and data processing agreement.
Request Documentation