Security
Your audit records, protected and provably yours.
You are trusting Axiospec with the records that prove your quality program. Here is exactly how that data is stored and protected, and how you get it back whenever you want. Each point below describes how the platform works today.
Where your data lives
- Hosted on Amazon Web Services in the United States (us-east-1).
- Encrypted in transit everywhere: the app and API are served only over HTTPS (TLS).
- The production database is encrypted at rest and is private, with no public internet access.
- Each workspace is kept separate. Every record carries your workspace id. On every request the server takes that id from your account or API key and checks it against your signed sign-in token. A customer's browser cannot choose it. Only CaliTech's own support access can switch workspace.
Built to prove integrity
- Every committed calibration is written to a tamper-evident, hash-chained ledger with a timestamp and the user who recorded it.
- Anyone with access can verify the full chain in one click and see the first record where it no longer matches. The chain makes a change detectable, not impossible.
- Optional maker-checker approvals require a second person to sign off before a record is final.
- Role-based permissions control who can view, record, and approve, and internal support actions are written to an audit log.
How people sign in
- Two-factor authentication with any authenticator app is available to every user, on every plan including Free.
- Single sign-on for the whole workspace over OpenID Connect or SAML, so accounts follow your existing identity provider.
- Restrict sign-in to your own email domains and set the role new people receive by default.
- Admins can require single sign-on for everyone, with a fallback path so an administrator cannot be locked out of their own workspace.
Your data stays yours
- Export your records while your account is open: one ZIP with a CSV manifest, a PDF audit summary, and the certificates and photos you attached.
- There is no lock-in, and you never pay per seat.
- If you close your account, your data is retained for a window so you can still export it, as described in our Privacy Policy and Data Processing Agreement.
- Hand your records to us for free white-glove migration, or import them yourself from CSV, Excel, GAGEpack or GAGEtrak.
Reliability and recovery
- The production database takes automated daily backups with a 14-day retention window.
- Deletion protection is enabled on the production database to guard against accidental loss.
- Records are versioned on the ledger. A superseded entry stays in the chain and is never silently overwritten.
- No uptime SLA. The production database runs in one availability zone, so recovering from a zone outage means a restore from backup.
Documentation for your review process
Adopting a calibration system usually means a security review, a software validation record, and an assessor who wants to see the output. These are written for those readers, and they state plainly what Axiospec does not have as well as what it does.
- Security and Data Handling (PDF) For an IT or security reviewer: hosting and region, encryption, network isolation, tenant separation, access control, backups, subprocessors, and the gaps we have not closed.
- Software Validation Summary (PDF) Input to your own validation record, not a substitute for it. Intended use, the data-integrity controls and how they are enforced, and a checklist you can run and sign in your workspace.
- Audit Evidence Guide (PDF) What an assessor actually receives: the contents of the one-click audit pack, how as-found and as-left readings appear, and how corrections show without erasing history.
Need something these do not cover, such as a completed security questionnaire? Email support@axiospec.com.
Have a security question or a report?
If your team needs to review how we handle data before you commit records, or you want to report a vulnerability, email us at support@axiospec.com. We reply within one business day. Axiospec is built by CaliTech LLC in Knoxville, Tennessee.