1. Our Approach to Security
Avertis is designed for industrial maintenance environments where operational data, asset history and engineering knowledge can be commercially sensitive. Security is treated as a core platform requirement.
Trust
Security
Draft for review. This page describes current and target practices in good faith; roadmap items should not be represented as completed certifications.
2. Data Protection
Customer data is protected using cloud security controls and encryption appropriate to the service. Access to production systems and customer data is limited to authorised personnel with a legitimate operational need.
3. Identity & Access
Avertis applies role-based access principles across the platform. Administrative and privileged access is restricted and controls are reviewed as the platform grows.
4. Infrastructure Security
Avertis uses managed cloud infrastructure and separates application, data and supporting services through the controls provided by those platforms.
5. Application Security
Secure development practices include input validation, dependency monitoring and code review prior to release. Independent penetration testing forms part of the security roadmap.
6. Backup & Business Continuity
Avertis uses regular backups, with backup data encrypted and stored separately from production systems. Formal recovery objectives are being developed.
7. Incident Response
Avertis will work to contain, investigate and remediate incidents affecting customer data and notify affected customers in line with applicable obligations.
8. Compliance Roadmap
Avertis is not currently claiming ISO 27001, SOC 2 or equivalent certification. Formal certification forms part of the longer-term security roadmap.
9. Reporting a Security Issue
If you believe you have identified a security issue affecting Avertis, contact security@avertis.ai with enough information for the team to investigate.