Trust & Security
Security, access, and compliance
What we do to protect the data our customers trust us with, and where to find the underlying policy.
SSO / SAML 2.0
Enterprise workspaces can authenticate users through your identity provider via SAML 2.0 single sign-on, so account access follows your existing directory and offboarding process.
GDPR & DPA
We process personal data in line with the GDPR, and offer a Data Processing Agreement (DPA) for customers who need one. Our full commitments on lawful basis, data subject rights, and international transfer safeguards (including Standard Contractual Clauses) are set out in our Privacy Policy.
Data hosting
Altriix is operated by B One Consulting. Where personal data is transferred outside the European Economic Area, we apply appropriate safeguards, including Standard Contractual Clauses or reliance on adequacy decisions where applicable, as described in our Privacy Policy. Contact us for the current hosting region for your workspace.
Role-based access
Access to customer workspaces and underlying systems is restricted by role, so team members and staff only see the data their role requires.
Encryption
Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). We run regular security assessments as part of our technical and organisational measures.
SLA-backed support
Enterprise customers get a dedicated account contact and a support response-time commitment set out in their agreement.
Sub-processors
We use a small number of infrastructure and communication vendors to operate the Platform. A current sub-processor list, including what each one does and where it's located, is available on request, and any change to it is communicated to Enterprise customers in advance under their DPA.
Certifications
Altriix is not yet formally certified to SOC 2 or ISO 27001. Our security programme follows the practices described on this page today; certification is on our roadmap and we'll update this section when that changes. If a specific attestation is a requirement for your procurement process, tell us and we'll work through it with you.
Have more questions?
For the full legal detail on how we collect, use, and protect personal data, read our Privacy Policy. For anything not covered here, including a specific DPA request or the current sub-processor list, .