Promarkia uses layered technical and organizational safeguards to protect customer data across the platform, from authentication and tenant boundaries to monitored production releases.
Effective and last updated: October 26, 2026
Security is treated as an operating discipline, not a single product feature. The overview below explains the protections customers can rely on without publishing sensitive infrastructure details that could weaken those protections.
Customer data is protected in transit using modern encrypted connections and is protected at rest in managed storage. Secrets and credentials are kept out of client-side code and handled through restricted operational controls.
Access is authenticated, authorized by role and scope, and limited to what a person or service needs. Privileged operational access is tightly restricted and protected with additional verification.
Promarkia applies organization-scoped authorization and tenant-isolation checks to prevent one customer from accessing another customer's protected records, workflows, or administrative controls.
Production changes pass automated tests, security checks, dependency review, migration validation, and release verification. Releases are built as traceable artifacts and use controlled deployment and rollback procedures.
Production services are monitored for availability, authentication activity, operational failures, and suspicious behavior. Alerts and response procedures support investigation, containment, recovery, and follow-up.
Critical data is backed up using controlled jobs with integrity checks. Service health, migration safety, recovery procedures, and rollback paths are tested as part of release and operational readiness.
Promarkia maintains data-classification and retention controls and supports governed export and deletion workflows. Access and policy decisions are recorded to provide accountability where appropriate.
AI and connected-service actions operate within authorized workflows and defined permissions. Sensitive operations use explicit policy gates, and integrations can be limited or disabled when required.
Promarkia regularly reviews access, dependencies, production configuration, security findings, and operational evidence. We prioritize remediation by risk and improve safeguards as the platform, customer needs, and applicable obligations evolve.
Customers and prospective customers can request additional security information appropriate to their evaluation. To report a suspected vulnerability, include the affected area, steps to reproduce, and potential impact—without including live customer data.