Aonyx Labs | Trust Center

At Aonyx Labs, security is not an afterthought — it is embedded into the design, development, and operation of everything we build. We believe that earning and maintaining customer trust requires a commitment to transparency, continuous improvement, and verifiable controls.

Our Information Security Management System is governed by the AICPA Trust Services Criteria and aligned to SOC 2 Type II, ISO 27001, and NIST SP 800-53. We encrypt all customer data at rest (AES-256) and in transit (TLS 1.2+), conduct semi-annual third-party penetration tests, and maintain 24/7 security monitoring across all production systems.

We hold ourselves accountable through annual audits, formal vulnerability management, and a published Responsible Disclosure Policy — because we believe open, honest security practices are the foundation of a trustworthy product.

| Subprocessor | Location of Processing | Usage Details |
|---|---|---|
| Anthropic | United States | LLM provider. LLM providers only process personal data if you choose to add personal data to your Conveyor Knowledge Graph or use our Customer Trust Agent to support workflows that contain personal data. |
| Aptible | United States | Cloud Infrastructure |
| Atlassian Statuspage | United States | Communicating system status to users. |
| AWS | United States | Cloud Services |
| Census | United States | Analytics |
| Chameleon | United States | In app guides |
| Datadog | United States | Logging and Monitoring |
| dbt Labs | United States | Data Warehouse |
| Elastic | United States | Keyword search |