Security & Compliance

Enterprise-grade security, by default

Your documents contain your most sensitive data. Zyflox protects it with encryption, access controls and audited compliance, from day one.

SOC 2 Type II
GDPR
HIPAA-Ready
AES-256
TLS 1.2+
SSO / SAML

Data encryption

All data is encrypted in transit with TLS 1.2+ and at rest with AES-256. Keys are managed and rotated automatically.

Access controls & permissions

Role-based access, SSO/SAML, and granular permissions ensure people only see the documents and fields they should.

Compliance certifications

SOC 2 Type II audited, GDPR compliant, and HIPAA-ready, with documentation available on request.

Data residency options

Choose where your data is processed and stored to meet regional and regulatory requirements.

Retention & deletion

Configurable retention policies and on-demand deletion give you full control over your document lifecycle.

Full audit trail

Every extraction, edit and export is logged with user attribution and timestamps for complete accountability.

Security architecture

Defense in depth, at every layer

Edge / TLS
Encrypted transport
Isolated processing
Segregated compute
Encrypted storage
AES-256 at rest
Audit & monitoring
Full observability

Download the security overview

Get our one-page security summary covering encryption, compliance and data handling. We'll email it to you.

Request PDF