Security & Privacy

Security your team can stand behind.

Platform, data, Orben, and agreements. Controls you can show your team.

Security Overview

Platform Security Identity, encryption, tenant isolation View controls → Data & Privacy EU hosting, retention, GDPR rights View data handling → Legal & Compliance Agreements, DPA, subprocessors View agreements →

Platform Security

Controls that protect your organization's data throughout the platform.

Encryption

  • Public web and API traffic uses TLS 1.2+; HSTS is enforced.
  • Encryption at rest for databases and storage (Azure-managed).
  • Stored integration credentials are encrypted and are not returned in plaintext through the API.

Access control & tenant isolation

  • Role-based access is scoped to your organization.
  • Privileged Anubion administration follows a separate operational path; details are available in a security review.
  • Account lockout and rate limiting help protect password sign-in.

Auditability

  • Audit records cover sign-ins, membership changes, and credential updates.
  • Audit events are exportable (CSV) for your own compliance evidence.

Platform operations

  • Hosted on Microsoft Azure with application monitoring.
  • Read-focused Azure scanning; Orben can run registered Anubion operations, not arbitrary Azure changes.
  • You control the service-principal roles granted in your tenant.

Data & Privacy

How Anubion hosts and processes your data, with geography that follows verified Azure deployment types.

Named EU regions Application and conversation data: Denmark East. Orben inference: Data Zone Standard, billed per token, in the EU Data Zone (Azure AI resource in Sweden Central). Operational telemetry: West Europe.
Retention Conversation expiry: 30 days of inactivity by default. Derived memory expiry: 90 days.
AI processing geography Production Orben uses Data Zone Standard inference, billed per token, within the EU Data Zone (Azure AI resource in Sweden Central), not a global AI deployment. Microsoft’s documented operational EU Data Boundary exceptions are disclosed separately.

Review data processing details →

Subprocessors

We keep the list of third parties that may process customer data deliberately short.

Subprocessor Purpose Location
Microsoft Azure Application, database, storage and Azure-hosted AI Denmark East (app/data), Sweden Central / EU Data Zone, Data Zone Standard billed per token (Orben inference), West Europe (telemetry). Microsoft operational EU Data Boundary exceptions; Orben details.
Azure Communication Services Transactional email (invitations, password resets, notifications) Configured data location: Europe. Email delivery depends on recipient location.

Agreements & privacy

The legal framework that governs how we process your data.

Report a vulnerability

Found a security issue? Email support@anubion.io with details so our team can investigate.

Questions about security or compliance?

We are happy to walk your security team through the platform, complete vendor questionnaires, and review the DPA together.

Request a security review

Want to try the product first? Start a 14-day free trial on our homepage

Request a security review

Pricing, rollout, security questionnaires, or a guided demo.

Fields marked * are required.

Submit your details so our team can respond to your inquiry.