Security & Compliance

    Enterprise Security Without Enterprise Complexity

    Your data is encrypted, your access is controlled, and your infrastructure is monitored. Security isn't an add-on -- it's how the platform is built.

    app.hiveku.com/settings/security

    Security Overview

    All Systems Secure
    SSL Certificate
    Valid
    Expires Dec 2026
    Data Encryption
    AES-256
    At rest + in transit
    Last Backup
    2h ago
    Automated daily
    Team Access (5 members)
    A
    Abe Rubarts
    AdminActive now
    S
    Sarah Chen
    Editor2h ago
    M
    Mike Torres
    EditorYesterday
    L
    Lisa Park
    Viewer3 days ago
    J
    James Wright
    Viewer1 week ago
    Built-in protection

    Security at Every Layer

    Encryption Everywhere

    • All data encrypted in transit (TLS 1.3) and at rest (AES-256)
    • Automatic SSL/HTTPS on all custom domains
    • Encrypted credential storage for integrations and API keys
    • Database connections secured with SSL certificates

    Access Control

    • Role-based access control (RBAC) with Admin, Editor, and Viewer roles
    • Per-project team member permissions
    • Invite-based access -- no public signups to your workspace
    • Session management with automatic timeout

    Secrets Management

    • Environment variables stored encrypted per environment (dev, staging, production)
    • Secrets never exposed in logs, UI, or API responses
    • Bring Your Own Keys (BYOK) for AI services -- your data stays with you
    • API keys with scoped permissions and rotation support

    Infrastructure

    • Hosted on AWS with multi-region availability
    • CloudFront CDN for global performance and DDoS protection
    • Isolated container environments per project
    • 99.9% uptime SLA with automated failover

    Data Protection

    • Automated daily database backups with point-in-time recovery
    • Data residency options -- choose where your data lives
    • Smart restore and backup verification
    • Complete data export available at any time

    Compliance & Auditing

    • Activity audit logging for all user actions
    • GDPR-compliant data handling and processing
    • CCPA compliance for California residents
    • SOC 2 Type II aligned security practices
    Bring Your Own Keys

    Use Your Own AI API Keys

    For organizations that need complete control over their AI usage, Hiveku supports Bring Your Own Keys (BYOK). Use your own Anthropic or OpenAI API keys -- your prompts and data go directly to the provider without passing through our systems.

    • Your API keys, your usage, your billing
    • Data goes directly to the AI provider
    • No prompt logging on Hiveku servers
    • Full cost transparency and control
    AI Provider Settings
    Anthropic (Claude)Connected
    sk-ant-...7x9k
    OpenAINot configured
    Add your OpenAI API key
    BYOK enabled: AI requests go directly to your provider account. Hiveku does not log or store prompts or responses.

    Security You Can Trust

    Questions about security or compliance? Our team is happy to walk through our security practices and answer any questions.