Trust center

Trust, verified.Not just promised.

How we protect your code, your keys and every agent session. Live status, our controls, and the documents your security team will ask for.

Live status

Ninety days, every component.

Hover any day to see what happened. Incidents are posted here first, with a full review within five business days.

All systems operationalChecked --:--:-- your time
Where your code goes

Your source never leaves your side.

Data-flow diagram. The AI agent's actions pass through the RAKSYON hook on your machine before reaching the repo. In RAKSYON Cloud mode only metadata leaves your environment. In VPC mode the control plane runs inside your network and only signed updates come in. YOUR ENVIRONMENT AI AGENTClaude Code RAKSYON HOOKPolicy decision DESTINATIONRepo · shell CONTROL PLANEHosted for you TLS 1.3 RAKSYON CLOUDMetadata only SIGNED CONTROL PLANEIn your VPC UPDATE REGISTRYSigned images DENIED

Swipe sideways to see the whole diagram

Source code
Stays on the developer's machine. The hook decides locally; code is never uploaded.
What leaves
Event metadata and content hashes, encrypted with TLS 1.3 in transit and AES-256 at rest.
What comes in
Policy and threat-intel updates, signed and verified before they load.
Our controls

Built on the same three values.

The values we hire for are the values we audit against. Each control maps to one of them.

VAL.01

Vigilance

Always watching, never anxious.

  • 24/7 monitoring of every production system
  • Tamper-evident audit logs for staff access
  • Threat intelligence refreshed every hour
VAL.02

Precision

Every pixel, packet and word is deliberate.

  • Least-privilege access with hardware keys
  • AES-256 at rest, TLS 1.3 in transit
  • Per-tenant encryption keys
VAL.03

Resilience

Systems that bend and recover.

  • Multi-region failover for the policy API
  • Encrypted daily backups, restore-tested quarterly
  • Hooks fail closed if the service is unreachable
Documents

Everything your reviewer will ask for.

SOC 2 Type II report

Security, availability and confidentiality
Under NDARequest

ISO/IEC 27001 certificate

Information security management system
PublicRequest

Penetration test summary

Independent annual test of platform and hooks
Under NDARequest

Security questionnaire

Pre-filled CAIQ and SIG Lite
Under NDARequest

Subprocessor list

Every vendor that touches customer metadata
PublicRequest
Responsible disclosure

Found something? Tell us first.

We welcome reports from security researchers and protect good-faith research. Include steps to reproduce and we'll work with you on a fix and a disclosure date.

security@raksyon.tech
  • 24 h

    We acknowledge every report within one day.

  • 5 d

    You get a triage decision and severity within five business days.

  • 90 d

    We aim to fix and coordinate public disclosure within ninety days.

  • Safe

    Good-faith research under this policy won't face legal action from us.