IronArchitects handles the most sensitive material an organization has: its architecture, its controls, and the evidence behind them. Tenant isolation, audit integrity, least-privilege access, and AI guardrails are designed in, not bolted on.
Every query is scoped to the tenant at the database layer with PostgreSQL row-level security in FORCE mode, backed by a per-request org context and a least-privilege application role. Even an application bug cannot leak cross-tenant data.
All traffic is encrypted with TLS 1.2+. Platform secrets, including API keys, webhook secrets, and SMTP credentials, are stored encrypted and can be rotated without a redeploy.
Customer-managed keys (CMEK/BYOK) and field-level encryption for PHI, cardholder data, and PII, an Enterprise option for the most regulated tenants.
Region pinning and single-tenant or VPC deployment options for Enterprise organizations with strict residency and isolation requirements.
Authentication runs on Keycloak with OAuth 2.0 / OIDC. Federate Microsoft Entra ID, Okta, or any OIDC-compliant identity provider; separate realms isolate platform administration from tenant access.
Automated provisioning and deprovisioning from your IdP over SCIM 2.0, Users and Groups, with group-to-role mapping. Offboard in the IdP and access is revoked here.
Organization-enforced multi-factor authentication and configurable session timeouts, so access policy is set once, at the org level, and applies to everyone.
16+ granular permissions compose custom roles for Compliance Officers, Privacy Officers, and Enterprise Architects. Segregation of duties is enforced at sign-off: the risk acceptor must differ from the approver, and self-approval is blocked.
Every consequential action becomes part of a tamper-evident record, from an architect's approval to an AI agent's verdict, so the evidence you hand an auditor is bound to what actually happened.
GDPR and CCPA workflows built in: portability export and erasure requests are handled with tooling that respects active legal holds, so privacy compliance never destroys litigation evidence.
Record a security or privacy incident and track its statutory notification deadlines automatically, HIPAA's 60 days and GDPR's 72 hours, with automated reminders on an append-only timeline that can be added to but never rewritten.
Personally identifiable information is redacted in platform logs and in AI responses, so sensitive values do not leak into operational tooling or model output.
The AI engine is governed like any other principal in the system: constrained, monitored, and never the final authority. Guardrails are enforced in the platform, not left to the model's judgment.
IronArchitects is built to support the evidence collection and control mappings behind the frameworks regulated organizations are held to, the same frameworks it generates designs against.
Certifications such as SOC 2 Type II and ISO 27001 are pursued as the platform matures. Our security documentation and subprocessor list are available on request, and we're happy to share our current attestation status under NDA. Contact our security team.
A microservice topology behind an API gateway that owns authentication, routing, rate limiting, and org-context injection; internal services never trust unauthenticated traffic.
Dependency scanning and security review run in CI. The same compliance scrutiny we apply to customer designs, we apply to our own platform.
Distributed tracing (OpenTelemetry) and RED metrics (Prometheus + Grafana dashboards) across every service, so issues are seen, diagnosed, and resolved fast.
Platform-configurable per-organization resource quotas and concurrency caps, connection pooling, and configurable upload limits keep one tenant from impacting another.
Start free and see the isolation, audit chain, and AI guardrails for yourself, or request our security documentation and subprocessor list before you commit.