Company
Security and trust
What Aurex does to protect your data — stated plainly, without claims we cannot back up.
How your data is protected
- Encryption in transit: the application is served over HTTPS
- Two-factor authentication for every user, and required wherever your workspace security policy requires it
- Role-based permissions, so each user sees and changes only what their role allows
- Separation between companies: each company's records are kept apart from every other company's
- Audit logs that record important changes and who made them
- Automated daily backups, with old backups cleaned up on a schedule
- Platform administration restricted to the Aurex product owner
Your responsibilities
- Turn on two-factor authentication for every user
- Give users only the roles they need, and remove access when people leave
- Keep tax-authority credentials and API tokens private
Common questions
Can I host Aurex in a dedicated environment?
Yes. Aurex can be deployed in a dedicated private environment for organisations with data-location or isolation requirements.
How do I report a security concern?
Contact us through the contact form with a description of what you found. Please do not include passwords or other credentials in the message.
Talk to the Aurex team
Tell us how your business runs and we will show you Aurex with your own processes.