Security by Architecture, Not by Compliance Badges
We build software that runs in infrastructure you control. Your operational records and database snapshots never enter a shared cloud belonging to Aethonex.
Where Your Data Lives
All code and data remain inside your cloud accounts (AWS, Hetzner, DigitalOcean) or on-premise servers. Aethonex does not operate a shared hosting service and does not ingest your database records into any central repository.
Least-Privilege & Time-Limited Access
During implementation, we require only temporary, scoped credentials for deployment environments. SSH keys and API tokens are revoked upon formal handover. We never request master root access to your entire corporate network.
Zero Hardcoded Credentials
API tokens, database connection strings, and encryption keys are injected via environment variables and encrypted secret stores. Secrets are excluded from version control via strict gitignore policies and never committed to source trees.
Backups With Tested Restores
We configure automated, encrypted off-site database backups (e.g. daily snapshots sent to S3-compatible cold storage). Every engagement handover includes a documented, tested restore procedure verified on staging infrastructure.
Immutable Logging & Traceability
Workflows include detailed audit logs capturing every automated action, input payload hash, and human approval sign-off. Logs are written locally to rotating files or dedicated logging sinks you manage.
Data Deletion at Handover
Any sanitized test exports, local mock environments, and staging files stored on development machines are securely deleted within 14 days of project completion.
Tools & Infrastructure Subprocessors
To maintain transparency, here are the operational tools Aethonex uses to coordinate communications and code repositories:
| Subprocessor / Vendor | Purpose | Data Processed | Location |
|---|---|---|---|
| GitHub (Microsoft) | Source code repositories & CI/CD actions | Code, configuration files, issue tickets | United States / Global |
| Cloudflare | Edge DNS, DDoS protection, static caching | Public web traffic, transit IP addresses | Global Edge Network |
| Cal.com | Meeting scheduling for Fit Calls | Name, email address, meeting booking notes | EU / United States |
Explicit Security & Compliance Exclusions
Security Incident Notification
We will notify affected customers by email within 72 hours of confirming any security incident involving their infrastructure or credentials.
Have Specific Security Questions?
We are happy to answer architecture questions directly on a free 15–20 minute Fit Call.