Encryption at Rest & Transit
AES-256 encryption for all stored data. TLS 1.3 for all communications with perfect forward secrecy.
- AES-256-GCM encryption
- Hardware Security Modules (HSM)
- Automatic key rotation
- Zero-knowledge architecture
Enterprise Security
Security, by default
ChromaFlow is designed around controlled access, auditability, secure implementation patterns, and compliance review workflows.
SOC 2 alignedGDPR awareHIPAA supportEnterprise review
SLA
Enterprise Option
<72h
Breach Notification
Audit
Action Trails
Review
Security Workflow
Defense in depth
Authentication & Access
Enterprise-grade identity management with multi-factor authentication and SSO support.
- Multi-Factor Authentication (MFA)
- SAML 2.0 & OpenID Connect SSO
- Role-Based Access Control (RBAC)
- Session management & timeouts
Infrastructure Security
Multi-region, enterprise-grade cloud infrastructure with DDoS protection and WAF.
- Cloudflare edge network
- DDoS protection
- Web Application Firewall
- VPC isolation
Monitoring & Detection
Operational monitoring with threat detection, alerting, and incident-response workflows.
- Security event monitoring
- Threat detection support
- Intrusion detection systems
- Alerting workflows
Audit & Compliance
Comprehensive audit logging with immutable records for compliance verification.
- Immutable audit logs
- User activity tracking
- API access logging
- 6+ year log retention
Data Protection
Privacy by design with data minimization, retention policies, and secure disposal.
- Data minimization
- Configurable retention
- Secure data deletion
- Data portability (export)
Continuous improvement
Penetration Testing
AnnualAnnual third-party penetration tests with remediation of all critical findings within 48 hours.
Vulnerability Scanning
ContinuousContinuous automated scanning of infrastructure and application code for vulnerabilities.
Security Training
QuarterlyAll employees complete security awareness training and phishing simulations.
Access Reviews
QuarterlyRegular review of access permissions following least-privilege principles.
Found a vulnerability?
We take security seriously. Report vulnerabilities responsibly and we'll work with you to resolve them quickly.
Headquarters
#13258
Chicago, IL 60605
United States
Octave-X, Inc.
1449 S Michigan Ave#13258
Chicago, IL 60605
United States
Security Team
General: security@chromaflow.ai
Vulnerabilities: security-reports@chromaflow.ai
Phone: (833) 941-3289