Security overview

Plain-language description of the platform architecture and security posture behind AEOSOS.

This page is descriptive. It is not a SOC 2 Type II report, ISO certificate, or guarantee that you will pass any audit or law.

Platform architecture (summary)

Edge compute: APIs, authentication, and dashboard assets delivered from a global edge network.
Storage: Object storage for vault-style artifacts; relational stores for metadata; queues for asynchronous webhooks.
Bot & abuse: Built-in bot screening and rate limiting where configured.
Optional AI: Hosted inference for in-product assistants — advisory only.

Procurement teams often map vendors to trust criteria. Below is a non-exhaustive alignment map — not an assertion of audit readiness.

Theme	Our posture
Logical access	Separate admin vs tenant surfaces; API keys hashed; optional platform-scoped keys.
Change management	Infrastructure-as-code, versioned migrations, peer review for application changes.
Logging & monitoring	Structured service logs; a tamper-evident security audit store in which new events are sealed so they cannot be altered after the fact.
Encryption	TLS in transit; provider-managed encryption at rest for all bound services.
Vendor management	Subprocessor list + notice policy; reliance on our subprocessors' own security programs.