Security

Encryption

Inputs and results are encrypted in transit with TLS 1.2 or later and at rest with AES-256. Encryption keys are managed by our hosting provider’s key service and rotated yearly.

Where data lives

Each workspace is stored in the region chosen when it is created. Inputs are not moved between regions.

Access

Staff access to customer workspaces is off by default. Support staff can see a workspace only when its owner grants access for a set period, and every access is logged and shown to the owner.

Sign-in

Every plan supports two-step sign-in. Organisation plans add single sign-on and can require it for every member.

Testing and reporting

An independent firm tests the service every year. To report a security problem, write to security@avelin.example.com; we reply within one working day.