Every property runs on its own dedicated, isolated environment — the BOX model — with GDPR-aligned data residency and encryption in transit and at rest.
No badges we haven't earned — here is exactly where each framework stands today.
Each property's data is isolated and resident in-region — EU/EEA or GCC, per your deployment — encrypted at rest and in transit. A Data Processing Agreement is signed before kickoff, data-subject-access tooling is built into the dashboard, and every transfer outside the EU runs under Standard Contractual Clauses.
We are building toward a SOC 2 examination. The controls below — access management, change management, monitoring, incident response — are already in place. We will not claim a report before an auditor has issued one.
Our information-security practices are being mapped to the ISO 27001:2022 control set. Certification is a future step, not a current claim — we are happy to walk your team through the controls we run today.
Where the industry default is one database for thousands of properties, every AURI property is its own isolated environment — so cross-property data leakage is an architectural impossibility, not a promise.
One database per property. No shared rows, no shared schemas. Encrypted at rest with Google Cloud default AES-256.
Each property runs in its own pinned namespace. No data path is shared across properties at runtime.
Daily encrypted backups with point-in-time recovery and a retention policy configured per property. Restores are audited.
No marketing language — the actual controls we run, grouped by area, with more detail on request.
What we can share today, and what is on the way — ask and we'll tell you exactly which is which.
The technical description of the per-property dedicated-infrastructure model — for your CTO. No marketing.
Our Data Processing Agreement and service-agreement templates, SCCs included, ready for your counsel to review.
Sub-processor list and security overview today; penetration-test, SOC 2, and ISO 27001 artefacts as those programmes complete. Shared under NDA.
Founder plus the engineer who built the isolation model on the call — bring your CISO, your DPO, your auditor.