How We Keep Things Secure
Security is designed in from the start, not added at the end. Here is how we protect your code and your data, in plain terms and without claims we can't back up.
Hosting
The Fluxweave Platform, and the apps we run on it, are hosted on AWS in the United States (US East). Software we build for you to own runs wherever you choose. The production database and cache run across more than one availability zone, so a single data-center failure doesn't take the platform down.
Encryption
Data is encrypted at rest in the database and in file storage. Traffic is encrypted in transit with TLS 1.2 or later, including the connections between our services and the database.
Backups
The database is backed up automatically, with point-in-time recovery, and is protected against accidental deletion.
Access
Access to systems and data is limited to the people whose work needs it. Permissions are separated by role and managed by group.
Code review
Senior engineers review every change before it ships, including everything AI produces. That covers what AI tends to miss: missing access checks, injection risks, and secrets in the wrong place.
Operations
For the systems we run, monitoring, patching, and updates are ongoing. Alarms watch database and cache health, and the application scales across availability zones as load grows. We follow written security rules and operating procedures.
Healthcare
We've built systems for healthcare and other regulated work with HIPAA-ready data handling, including audit trails and careful handling of personal data from day one.
Your data
Whether Managed or Build, your data, your customer relationships, and your brand are yours.
If your team has a security questionnaire or specific requirements, send them over. We'll walk you through our controls in detail.
Start with a free assessment
A free call with a senior lead. Tell us what you're working on, and we'll tell you how we'd approach it and what the first step should be.