We hold ourselves to the standard we sell
A security platform has to be secure by design. Here is how Argyx protects your data.
Per-tenant encryption
Integration credentials and secrets are sealed with AES-256-GCM using a per-tenant data key, itself wrapped by a master key (envelope encryption).
Database-enforced isolation
Every tenant table is protected by PostgreSQL row-level security in addition to application checks — a query can only ever see its own organization.
Strong authentication
Scrypt-hashed passwords (12+ characters, breached-pattern checks, lockout), Sign in with Google or Microsoft, SCIM 2.0 provisioning and device-bound sessions.
Hardened web application
Per-request CSP nonces with strict-dynamic, HSTS preload, frame-ancestors none, CSRF-safe server actions and SSRF-guarded outbound requests with pinned IPs.
Immutable audit trail
Every sign-in, configuration change and response action is audit-logged and can be streamed to your SIEM through signed webhooks.
Data residency
Choose where your tenant's data lives — US, EU, UK, UAE or Pakistan — at sign-up.
Least privilege connectors
Connectors request read-only scopes. Write actions run only through approved playbooks with a named human approver.
No card data
Payments are processed by Paddle (PCI DSS Level 1). Card details never touch Argyx systems.
Responsible disclosure
Found a vulnerability? Email security@secureit360.ai. We acknowledge reports within two business days and never pursue good-faith researchers.