Security & trust

Security that is enforced, not just promised.

AYBARION TRADE is built for teams that make business decisions on evidence. Our server keeps each company’s data separate, checks every sign-in and approval and keeps your records, and sensitive actions are written to a tamper-evident audit trail.

Company data kept separate Password + MFA or SSO Authenticator-app MFA Tamper-evident audit
Encrypted in transit
Verify with MFA
Security controls

Eight protections for every company account

Each control is built into the platform, not left to settings. When a control blocks an action, nothing goes through and the attempt is recorded.

Layers of protection

How each request is checked, step by step

Select a layer to see the controls it enforces, or trace a request end to end.

Human approval

Sensitive actions need two people and an extra MFA check

Changes to access rights or pricing rules, large exports and anything that could act outside the platform need a written reason, an MFA check and approval from a second person.

Two-person approval Sample workflow
Sample
RequesterOwner · MFA verified
MFA required
ApproverA second person must approve
Actions outside the platform stay locked until both approvals are recorded.
Always needs approval
Tamper-evident audit trail

An activity log that administrators cannot rewrite

Security-relevant events such as sign-ins, approvals, payments and data exports are sealed into a SHA-256 hash chain. Each entry seals the one before it, so a changed or removed entry is detected, and operators can verify the whole chain at any time.

Changing any past entry would break every link after it, so tampering is detected, not hidden.
Retention is contracted per workspace. Deletion requests are honoured once the legal hold or retention term ends.
Activity log Sample events · fictional workspace
Sample
Responsible disclosure

Found something? Tell us first.

We welcome reports from security researchers and customers. If you act in good faith and follow the rules below, we will not pursue legal action against you, and we will keep you informed until the issue is resolved.

  • Email the details, reproduction steps and impact to the security contact below.
  • Only test against your own workspace.
  • Never access, modify or keep data that belongs to another company: stop and report as soon as you see it.
  • No denial-of-service, spam, social engineering or physical testing.
  • Give us reasonable time to fix the issue before any public disclosure.
trade@aybarion.com
security.txt
Contact: mailto:trade@aybarion.com
Policy: /security.html#disclosure
Preferred-Languages: en, tr, de, fr, it, es, pt
What we do not claim

We do not show certification badges we have not been awarded. Current security documentation and assessment status are shared with customers under NDA during scoping.

Security review

Need our security documentation for a vendor review?

Request access and mention your review. We share architecture, data-flow and control evidence under NDA.