Send a one-line email, we'll send the NDA the same day. Most procurement teams have the full pack within 48 hours.

CERTIFICATIONS & STANDARDS

[1]

ISO/IEC 27001

Information security management. Aligned operations across all six India offices.

[2]

ISO 9001:2015

Quality management system.

[3]

ISO 20000 Aligned · ITIL v4

IT service management standard. Underpins all AMS contracts including AXIOM-led engagements.

[4]

SOC 2 Type II

Programme in progress across the SaaS suite.

[5]

GDPR-Ready

Data processing agreements, sub-processor disclosures, and data residency controls aligned to EU GDPR for European customers.

[6]

DPDP Act 2023 Compliant

Digital Personal Data Protection Act (India) compliance: notice, consent, purpose limitation, data principal rights, breach notification.

PRODUCT SECURITY BASELINE

SupplierX, OrderX, Xpense, Logystix, and ManuFex all ship on the same security baseline. Single tenant or pooled customer choice.
Hosted on Google Cloud or AWS with regional data residency.

[1]

Data Residency

Deploy in the customer's preferred region: India · UAE · Singapore · EU-West · US-East. Data does not cross the boundary you set.

[2]

Encryption

AES-256 at rest. TLS 1.3 in transit. Customer-managed keys (BYOK) available on the Enterprise plan.

[3]

Identity

SSO via SAML 2.0 or OIDC. SCIM provisioning. MFA enforced. Federated with Azure AD, Okta, Google Workspace.

[4]

Audit & Logging

Immutable activity logs. Exportable to customer SIEM (Splunk, Sentinel, Sumo Logic) via standard connectors. 90-day default retention; longer on request.

[5]

Tenancy

Single-tenant or pooled deployment customer's choice. Single-tenant runs in a dedicated VPC with the customer's name on the resource tags.

[6]

Incident response

24×7 NOC. P1 acknowledgment within 15 minutes. Breach notification to customer Security Officer within 24 hours per contract default.

TRUST & SECURITY

For the audit committee, the security team, and the procurement desk.