Ahrigate

Security

(published before launch) OÜ, Estonia · Last updated (published before launch)

This page describes the technical and organisational measures Ahrigate applies to its AI API gateway. It is referenced from the Data Processing Agreement as Ahrigate's Article 32 GDPR security commitment.

1. Infrastructure

  • Website and API routes are hosted on AWS Lightsail, Frankfurt (eu-central-1). Vercel (fra1, Frankfurt) is configured as a fallback only.
  • Authentication and account management are provided by Clerk.
  • Account and application data is stored with managed database and cache vendors (see the sub-processor list in the DPA).
  • The API gateway runs on AWS, Frankfurt (eu-central-1). (published before launch)

2. Data in transit and at rest

  • Public endpoints are served over HTTPS. (published before launch)
  • Encryption at rest is provided by the underlying managed storage vendors. (published before launch)
  • Whether request or response content is persisted by the gateway is described in the Privacy Policy. (published before launch)

3. Access control

  • Customer sign-in is handled by Clerk, which supports the sign-in methods enabled in our account configuration. (published before launch)
  • Administrative routes are separated from customer routes and require an administrator credential.

4. Abuse prevention

  • Rate limiting is applied to selected public endpoints (for example the playground and desktop sign-in flows) to prevent abuse and protect upstream quotas.

5. Monitoring and incident response

  • Application errors are recorded in our server logs; operational alerts are delivered to the team by Telegram.
  • Security contact: support@ahrigate.com
  • Where a personal data breach affecting your data is confirmed, we will notify you without undue delay, in line with GDPR Article 33.

6. Sub-processors

7. Certifications

  • Ahrigate does not currently hold any independent security certification (such as ISO 27001 or SOC 2) and has not yet commissioned an external penetration test.
Questions? Email support@ahrigate.com