Security at NewAxiom
NewAxiom uses a workspace-scoped security model designed to reduce cross-tenant risk and protect sensitive operational data. Core controls are enforced server-side across API access, resource ownership checks, role-based authorization, and secure data handling practices during launch and customer onboarding.
Security Controls Overview
Security controls focus on tenant isolation, backend authorization, authentication, secrets handling, auditability, and safer production behavior.
Customer data is protected through encrypted transport, workspace-scoped access controls, and secure platform storage practices.
- Protected routes enforce workspace-scoped authorization server-side.
- Resource lookups are checked for workspace ownership before access.
- Cross-workspace access attempts are denied and logged.
- owner
- admin
- manager
- analyst
- viewer
- Raw secret values are not returned to clients.
- Sensitive auth material is excluded from normal logs and UI payloads.
- Credential lifecycle safeguards continue to be strengthened.
- Security event review and operational processes continue to mature.
- Additional administrative authentication controls can be enabled where supported.
Operational safeguards
NewAxiom maintains internal security and operational readiness documentation to support incident handling, backup review, and recovery testing. These controls are intended to improve response readiness and operational discipline as the platform matures.
- Incident response and breach notification procedures are maintained internally.
- Backup and recovery coverage is reviewed for critical systems and data sources.
- Recovery testing is tracked internally and updated as infrastructure changes.
- Security and operational processes continue to mature as NewAxiom moves through launch and customer onboarding.
Monitoring and diagnostics
NewAxiom uses logs, audit events, and diagnostics tooling to support reliability, security review, and incident investigation. Diagnostic tooling is used to identify errors and service issues and is configured to avoid unnecessary collection of sensitive customer data.
- Error diagnostics support reliability triage and service issue resolution.
- Audit events are recorded for high-risk activity and key operational actions.
- Failed authorization attempts are monitored to support security investigation.
- Reliability monitoring supports incident detection and response workflows.
- Sensitive-data minimization is applied in logging and diagnostics processes.
Website analytics and marketing tags, where used, are controlled through NewAxiom's cookie consent preferences. Security-essential and service-essential technologies may remain active to operate and protect the site and services.