INFONEP
Platform Security

Enterprise AWS Information Security Standards

INFONEP implements strict physical, network, and data curation security controls mapped to global compliance frameworks.

AWS WAF Screening Shield

DataAtlas™ API routes execute behind customized AWS Web Application Firewalls (WAF) screening traffic spikes and preventing DDoS attempts or automated web scraping scripts.

AWS Cognito Identity Directory

User authorizations are governed by isolated Cognito User Pools using cryptographically secure JWT authentication tokens, ensuring data directories remain private.

PostgreSQL Database Isolation

Amazon RDS instances utilize AES-256 encryption at rest. Relational databases are hosted in private subnets, completely cut off from raw internet entry paths.

VPC Private Networking

Client workspaces run within virtual private networks, protecting communications tunnels between web servers, API Lambdas, and OpenSearch database indexes.

Compliance Certifications

SOC 2 Type II Audited

Host instances utilize AWS architectures audited to meet strict SOC 2 type II security standards.

GDPR Compliance

Platform frameworks support automated data sync deletion and JSON exports for privacy verification.

PCI-DSS Compliant

Database integrations handle transactions via PCI-DSS Level 1 Stripe checkout tunnels, protecting customer banks.