Security

Security is how we earn enterprise trust.

Every Innotechwise agent runs inside an enterprise's most sensitive systems. That privilege is earned by transparent, verifiable security practices — not by a badge.

Encryption

TLS 1.3 in transit. AES-256 at rest. Secrets held in a dedicated vault with rotation.

Access control

Role-based access, least privilege, SSO for the team, MFA enforced everywhere.

Audit trails

Every production action is logged with actor, timestamp, and payload hash. Trails are immutable.

Isolated infrastructure

EU-based cloud. Single-tenant deployments and BYOC available for enterprise customers.

Vendor diligence

Every sub-processor is reviewed. Contracts require SOC 2 or equivalent where available.

Responsible disclosure

Report vulnerabilities privately to [email protected]. We acknowledge within 48h.

Responsible disclosure

Found something? Tell us.

If you believe you have found a security vulnerability in our website or platform, please email [email protected] with details. Please:

Provide enough detail to reproduce the issue.
Give us reasonable time to respond before public disclosure.
Avoid testing that could disrupt our production systems or other users.

We commit to acknowledging your report within 48 hours and providing a timeline for remediation. We credit researchers in our Hall of Thanks where appropriate.

For enterprise buyers

A SIG Lite, our DPA template, architecture overview, and sub-processor list are available on request to prospective enterprise customers. Email [email protected].