Security
Identity, session, tenant isolation and delivery controls built into the product.
Trust Center
Security without the theatre.
What Knaxly protects, how the current product is operated, and where assurance work genuinely stands.
Early stage. No certification claimed.
Privacy
What personal data Knaxly holds, where it is processed and what you can ask us to do with it.
Assurance
Current evidence and limitations, stated without badges Knaxly has not earned.
Current posture
Passwordless identity
Microsoft, Google and GitHub sign-in. Knaxly stores no passwords.
Revocable sessions
Opaque server-side sessions with an 8 hour idle limit and 30 day absolute limit.
Tenant isolation
Organisation context is set per database transaction and enforced with Postgres row-level security.
Protected delivery
Type checking, linting, tests and a production build run before product changes merge.
Cloud hosting
The current application and database run on Microsoft Azure in Central US.
No tracking
Knaxly uses no advertising, analytics or tracking cookies on the site or in the app.
Assurance status
Knaxly has drafted its security policy set and begun SOC 2 readiness work. The policies are unsigned. Knaxly has not bought a compliance platform, engaged an auditor, completed an independent penetration test, or earned SOC 2 or ISO certification.
That changes when the evidence changes. Until then, no audit report or certification badge appears here.
Public information
The Privacy page describes current data collection, storage, transfers, subprocessors and data rights. The Terms of Service cover account responsibility, acceptable use and security reporting.
Security issues can be reported to support@knaxly.com.
Gated resources
Security overview
Identity, sessions, tenant isolation, infrastructure and delivery controls.
Data handling and subprocessors
The current product data flows and the services involved.
Policy and audit material
Released when signed or independently issued. There is no audit report today.
Request access
Sign in with the same Knaxly account you use for the product. Your verified account email, company and intended use are submitted for manual review. There is no separate Trust Center login.