On this page
Executive Summary
This Enterprise Security Whitepaper provides a technical overview of the security architecture, operational controls, and engineering practices used to protect the Anchor platform.
Read together with the Security Overview, Privacy Policy, Compliance Overview, Data Processing Agreement (DPA), Business Continuity & Disaster Recovery Plan, and Subprocessors.
Table of Contents
- Security Philosophy
- Shared Responsibility Model
- Platform Architecture
- Infrastructure Security
- Identity & Access Management
- Authentication
- Authorization
- Encryption
- Secrets Management
- Network Security
- Application Security
- Secure Software Development Lifecycle
- Vulnerability Management
- Dependency Management
- Logging & Monitoring
- Threat Detection
- Incident Response
- Backup & Recovery
- Business Continuity
- Privacy & Data Protection
- AI Security
- Customer Security Responsibilities
- Security Roadmap
- Contact
- Related Documents
Security Philosophy
Anchor follows a defense-in-depth approach with least privilege, secure-by-default engineering, privacy by design, continuous monitoring, operational resilience, and continuous improvement.
Shared Responsibility
Anchor
- Platform infrastructure
- Application security
- Identity systems
- Monitoring
- Incident response
- Backups
- Security updates
Customers
- User accounts
- Strong passwords
- MFA
- Organization permissions
- Device security
- Compliance obligations
Platform Architecture
Infrastructure is hosted across AWS, Google Cloud, Oracle Cloud, and DigitalOcean.
Authentication supports:
- Email/password
- Google Sign-In
- JWT
- MFA
Passwords are hashed using bcrypt.
Anchor does not store payment card details.
Security Controls
Security controls include:
- HTTPS/TLS
- RBAC
- Secure SDLC
- Logging and monitoring
- Threat detection
- Vulnerability management
- Dependency management
- Backup and recovery
- Business continuity
- Privacy protections
- AI governance
Contact
Aurelo Technologies
Accra, Ghana
Security: security@technologies.aurelo.cc
Legal: legal@technologies.aurelo.cc
Support: support@technologies.aurelo.cc
Telephone: +233 532 396 876
Related Documents
- Security Overview
- Privacy Policy
- Data Processing Agreement (DPA)
- Compliance Overview
- Service Level Agreement (SLA)
- Business Continuity & Disaster Recovery Plan
- AI Usage Policy
- Subprocessors
- Trust Center FAQ
- Trust Center Changelog