Security & Trust Overview

Security is foundational to the STAR™ and FUSION™ platforms.

Our services are built on Amazon Web Services (AWS) and follow industry-standard security practices designed to protect customer data, ensure service availability, and support enterprise software teams.

Our services are hosted on secure cloud infrastructure provided by Amazon Web Services (AWS) and may utilize other reputable third-party cloud and technology providers.

Customer data is hosted in the AWS US-East/EU West.

These providers support:

• •Secure cloud hosting
• •Data storage
• •System scalability
• •Network and infrastructure security
• •Backup and redundancy services

We select infrastructure providers based on reliability, security standards, and operational performance.

Access to production systems and operational environments is restricted to authorized personnel only based on job responsibilities. We implement role-based access principles to ensure that:

• •Access is limited to what is necessary for operational duties
• •Administrative privileges are restricted
• •Authentication credentials are securely managed and not publicly shared

We implement technical and organizational safeguards designed to protect data within our systems. Data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256. These safeguards also include access controls and system-level protections appropriate for cloud-based software services.

Customer and operational data are handled with confidentiality and are not disclosed except as described in our Privacy Policy.

In the event of a security incident affecting customer data, we will notify affected customers without undue delay.

We maintain system and operational logs to support:

• •Service reliability
• •Performance monitoring
• •Troubleshooting and diagnostics
• •Security oversight

These logs are used internally to help maintain service stability and detect potential issues.

We perform ongoing maintenance of our systems, including:

• •Software updates
• •Security patches
• •Dependency and library updates
• •Operational improvements

We also monitor relevant security advisories for the technologies we use and take action as appropriate.

We utilize cloud-based redundancy and backup capabilities provided by our infrastructure providers to help support data durability and service continuity.

These measures are designed to reduce the risk of data loss and support recovery in the event of operational disruptions.

We use trusted third-party service providers to operate and improve our services, including cloud infrastructure providers such as AWS.

These providers are selected based on their security practices and operational reliability and are contractually expected to maintain appropriate safeguards for data protection.

System operations are managed by a small, designated team under least-privilege access controls, with all administrative access restricted and auditable. This tightly controlled model minimizes exposure and supports disciplined operational management.

We continuously review and improve our security practices as our services evolve. Our goal is to maintain a secure and reliable environment appropriate for enterprise-grade software platforms.