Trust Center
Security Practices
Security is an ongoing engineering and governance discipline. XRDNA's products are designed to support identity, contextual authority, operational continuity and traceability across heterogeneous systems.
A product capability is not the same as evidence that an organizational control is in place and has been independently assessed. The table below separates the two, and only lists a status the XRDNA security owner has confirmed.
Topics we can discuss with customers
| Topic | Status |
|---|---|
| Identity and authorization boundaries in deployments, including role- and context-based access | Implemented |
| Encryption in transit and at rest | Implemented |
| Secrets management | Implemented |
| Audit logging | Implemented |
| Software change control | Implemented |
| Vulnerability handling | Implemented |
| Incident response | Implemented |
Deployment-specific requirements
Availability, data handling and security responsibilities depend on each deployment and contract, and are agreed with each customer.
Assessment materials
We do not publish confidential architecture diagrams, exploit details, customer mission information or assessment reports. Qualified parties can request security materials through [email protected].