Security
Layered controls: network, data, keys, users, access and infrastructure. Secure development and regulatory framework.
Trust center.
Everything your risk, compliance and procurement teams need to assess Alodiga as a vendor, in one place and with the actual status of each item.
Certifications: actual status
We distinguish three states: certified (issued by an auditor, with date and scope), under audit (with an expected date) and aligned (controls implemented according to the standard, not certified).
The current status of each certification, its scope and the supporting documentation (auditor reports, statement of applicability, vendor questionnaires) are shared with your risk team on request. Request compliance documentation
Security, privacy and legal documents
Privacy
What data we process, on what basis, when we act as the institution's processor and how we use AI.
Terms of use
Terms of use of the website and the platform, responsibilities and contractual service levels.
Legal notice
Owner details, intellectual property and legal notice channels.
Service levels (SLA)
As per contract
Committed availability, response and recovery times and support hours are defined in the SLA of each contract, based on the modules contracted and the deployment model.
Scheduled maintenance is announced in advance. We will publish availability figures here only when they are backed by verifiable measurements.
Incident management
Your institution is the obligated party before the regulator. Our process is designed so you have the information in time to meet your own reporting duties.
- Detection and loggingContinuous platform monitoring. Every incident is logged with time, scope and affected systems.
- ClassificationIt is classified by severity and impact on data and operations, which defines the escalation level.
- Customer notificationNotice without undue delay to the contacts designated by the institution, through the channels and within the time frames agreed in the contract.
- Containment and closureContainment, remediation and root cause analysis, with the information you need for your regulatory reports.
Notification and resolution time frames: as per contract.
Service status
Incident history available to customers on request.
Cloud and subprocessors
AloCore is deployed on AWS, Azure or GCP, as agreed with each institution. The infrastructure managed by Alodiga runs on AWS, with private networks (VPC) isolated per environment.
We only share data with AI model providers when the contract prohibits them from using it to train their models, and only the minimum data necessary.
The list of subprocessors applicable to your contract (provider, service, data location) is provided with the compliance documentation.
To report a vulnerability or a privacy question, write to privacy@alodiga.com.
Does your vendor committee need more detail?
We will send you the current compliance documentation and arrange a technical session with your security and risk team.
- We contact you through the channel you prefer.
- Demo with a solutions architect, focused on your current systems.
- Phased proposal: which module first, why, and what result to expect.
Or directly: info@alodiga.com · +1 305 815 4862