Security
Security & data protection
We take the protection of your data and your customers’ data seriously. Here is how Amiligence is built.
Encryption in transit
All traffic is served over HTTPS/TLS. The application runs on managed cloud infrastructure (Vercel) with automatically provisioned certificates.
Account isolation
Customer data is isolated per account. Database row-level security restricts each record to its owner or an authorized administrator; writes go through least-privilege server routes, not the browser.
Secret handling
API keys are stored only as salted hashes and shown once at creation. Provider credentials live in server-side environment variables and are never exposed to the frontend.
Access control
Authenticated sessions, role-based permissions for administrative areas, and server-side usage quotas and rate limits to prevent abuse.
Auditability
Key administrative and screening actions are logged so activity can be reviewed.
Data sources
Screenings draw on authoritative public and licensed sources; findings are linked back to their origin so they can be independently verified.
Amiligence does not currently claim formal certifications such as SOC 2 or ISO 27001. We’re happy to discuss our controls, data handling and subprocessors with prospective customers — contact privacy@amiligence.co.