Company · Ixtrust Center
How we secure the platform that decides
01IxTrust Center
Security and compliance of the platform, in one place.
ConteXengine makes access decisions for your estate, so the way it is built and run has to meet the bar of the companies it serves. This page shows the current state, including what is still in progress, and where to ask for the documents behind it.
SOC 2
TYPE 1
TYPE 1
SOC 2 Type 1, in progressAudit window planned for 2027 · controls implemented and monitored now · report shared under NDA on completion
Policies
Information security policy
Access control policy
Incident response policy
Secure development policy
Data classification & handling
Vendor & subprocessor management
Product security
Data plane inside the customer boundary
No model on the decision path
Deterministic, replayable decisions
Role-based console access, MFA
Write-back off by default; enabled per system by an administrator
Signed evidence packs
Data security
Encryption in transit (TLS 1.2+)
Encryption at rest
Customer data never leaves the data plane
Control plane carries licensing and templates only
Backups and restore tested
Key management by the customer’s cloud KMS
Corporate security
Background checks for staff
Security awareness training
Endpoint management and disk encryption
Least-privilege internal access, reviewed
Availability & operations
24×7 global command center
Monitoring and alerting
Change management with approvals
Disaster recovery plan
Privacy & compliance
Data processing agreement available
GDPR-aligned processing
SOC 2 Type 1, in progress
ISO 27001, roadmap
implemented in progress roadmap
02Documents
Request the documents behind the controls.
Policies and reports are shared with customers and prospects under NDA. Ask and we send them the same day.
Information Security Policy🔒 on request
Incident Response Policy🔒 on request
Access Control Policy🔒 on request
Secure Development Policy🔒 on request
Data Privacy Policy🔒 on request
Encryption Policy🔒 on request
Business Continuity Plan🔒 on request
Vendor Management Policy🔒 on request
Architecture Overview, control plane / data plane🔒 on request
Penetration test summary (on completion)🔒 on request
03Architecture
Control plane in our cloud. Data plane inside yours.
CONTROL PLANE · IXFORCE
Licensing, releases, context-model templatesReceives a licence heartbeat. Holds no customer identity data.DATA PLANE · YOUR BOUNDARY
Your graph, your signals, your decisions, your ledgerPrivate cloud, public cloud or hybrid. Nothing leaves it, and no model sits on the decision path.Context decides, not policy.