Security
Inttelio is a security company, and we hold our own products to the standard we set for our clients. Here is how we protect your data and where it lives. Detailed security documentation is available on request.
Where your data lives
Our products are hosted on Amazon Web Services (AWS). That means the physical security of the facilities, the resilience of the network, and a deep bench of independent certifications are handled by one of the most scrutinized cloud platforms in the world - AWS maintains SOC 1/2/3, ISO 27001, PCI DSS, and FedRAMP authorizations, among many others. We concentrate our effort where it matters most: the security of the application and your data on top of that foundation.
How we protect your data
Our products run on Amazon Web Services, whose data centers and platform maintain some of the most rigorous certifications in the industry - including SOC 1/2/3, ISO 27001, PCI DSS, and FedRAMP. We build on that foundation rather than rolling our own infrastructure.
All traffic is served over TLS. Data at rest is protected with strong, managed encryption, and secrets are held in dedicated secret storage - never in source code or shared files.
Access is granted on a need-to-know basis and enforced with role-based access control. Administrative access is tightly scoped, and there is no shared super-user backdoor into customer data.
In our multi-tenant products, each customer’s data is segregated so one organization can never see or reach another’s. Authorization is checked on every request.
Activity is logged and monitored so we can detect, investigate, and respond to anomalies. We design for auditability, aligned with NIST and SOC 2 control expectations.
We keep dependencies current, review changes, and manage vulnerabilities as part of how we ship - not as an afterthought. As a security firm, we test our own products the way we test our clients’.
Questions
On Amazon Web Services (AWS). AWS provides the physical and platform security - hardened data centers, network controls, and a broad set of independent certifications (SOC 1/2/3, ISO 27001, PCI DSS, FedRAMP, and more) - and we build our application security on top of it.
Yes. Data is encrypted in transit with TLS and protected at rest with managed encryption. Application secrets and credentials are stored in dedicated secret storage, never in code.
No. Where our products offer AI features, they are optional and bring-your-own-model: they run under your own provider and API key, and only public standard text is ever sent - never your data. We do not train models on customer content.
Yes. Detailed security documentation is available on request, and we are happy to complete vendor security questionnaires. Contact us to get started.
We are happy to share a security overview and complete vendor security questionnaires. Reach out and we will help.
Contact us