Security
Your product data is your business. We treat it that way.
A Gaiatix model holds your formulations, your costs and your supplier relationships, some of the most commercially sensitive data a brand owns. Protecting it is not a feature we added; it is how the platform is built.
Where your data lives
Cloud-hosted or on your own premises. Your call.
Cloud hosted
We run the platform for you: managed infrastructure, TLS on every connection, daily backups encrypted at rest and updates applied without an upgrade project. The fastest way to be up and running, with the operational security handled.
On premises
For organisations that manage their own data security, Gaiatix deploys inside your network, under your controls, your policies and your backup regime. Your data never leaves your infrastructure and your security team stays in charge of it.
Protections
Designed in, not bolted on
Tenant isolation
Gaiatix is multi-tenant by design: every request is scoped to your tenant at the API layer, on every route. Your formulations, costs and suppliers are never visible to anyone else.
Role-based access
Fine-grained capabilities control who can see and change what, per user and per role. A viewer cannot edit, an editor cannot administer and permissions are checked on the server, not the screen.
Authenticated everywhere
Every endpoint requires authentication, using short-lived access tokens with managed refresh. Single sign-on through Microsoft Entra ID is available per tenant.
Encrypted in transit and at rest
All traffic runs over TLS and backups are encrypted at rest. Secrets and credentials are redacted from API responses and never written to logs.
Daily backups
Cloud-hosted data is backed up every day and those backups are encrypted at rest, so a mistake or a failure is a restore, not a loss.
A full audit trail
Every change to a product, component or setting is recorded: what changed, who changed it and when. Security events are logged and reviewable.
Questions
Talk to us about security
If your security team has a questionnaire, a policy or a hard requirement, we would rather see it early. Get in touch and we will walk through how Gaiatix fits your controls.