FAQ
Security program
A SOC 2 Type II examination against the Security criteria is in progress and our auditor is engaged. Until the report is issued, our security policies are available under NDA through the access request option on this page.
Certification against ISO/IEC 27001:2022 is in progress. We operate an information security management system aligned to the standard and monitor it continuously.
We follow a documented Incident Response Plan that is tested at least annually. Incidents are logged, tracked, and resolved, and affected customers are notified in line with our commitments.
Yes. We maintain a Business Continuity and Disaster Recovery Plan and test it at least annually. For the platform we target a recovery time objective of 4 hours and a recovery point objective of 1 hour. The plan is available under NDA through the access request option on this page.
Infrastructure and data
The platform runs on Cloudflare's globally distributed network (Workers, D1, R2, and Durable Objects). We do not operate our own physical servers.
No. The product queries logs, metrics, and traces from the observability providers you connect, where your telemetry already lives. We store the platform state needed to run investigations and incidents, covered by our retention and deletion practices.
Yes. Data is encrypted in transit with TLS 1.2 or higher and encrypted at rest across our storage services.
Customer data is removed from the application environment when a customer leaves the service, following our data retention and disposal procedures.
Praxen Inc. uses large language models to run investigations. On the default plan, models run on Cloudflare Workers AI, within the same Cloudflare infrastructure that hosts the platform and is listed in our subprocessors. If you connect your own model provider key, requests go to that provider under your agreement with them.
Working with us
Use the access request option on this page. We review requests promptly, and an NDA may be required for sensitive documents.
Top