This page describes the security measures in AurDesk, a product of EWARDS ENGAGEMENT PRIVATE LIMITED. We describe what is in place today, and we do not claim certifications we do not hold.
Data protection
Data is encrypted in transit using TLS and encrypted at rest.
Access control
- Role-based permissions: owner, admin, manager and agent, each seeing only what the role needs.
- Sessions rotate on login. Multi-factor authentication is available to organisations that turn it on.
- Scoped, short-lived access tokens and rate limits for connected integrations.
- No-login approval links are rate-limited and verified by a one-time code.
Tenant isolation
Every query is scoped to the customer's organisation at the database layer, so one organisation's data does not appear in another's view.
Audit and retention
Ticket and partner actions are recorded in an audit log. Data-retention rules are set per organisation.
Infrastructure
AurDesk runs on cloud infrastructure from Amazon Web Services. We do not currently hold SOC 2 or ISO 27001 certification of our own.
Reporting a security issue
Email support@aurdesk.com with "Security" in the subject. Please give us reasonable time to investigate before disclosing publicly.