Main Security

Version 1.0 Effective Date: September 1, 2026 Security Framework: Zero-Trust / ISO 27001 & SOC 2 Aligned

At Amdura™ ("we," "our," or "us"), information security is foundational to our brand, engineering practices, and client trust. Whether we are building custom web applications, deploying cross-cultural AI plugins, or executing user experience research, we enforce enterprise-grade security protocols to safeguard client data, source code, and user telemetry.

This document details the technical infrastructure, operational controls, and security standards maintained across all Amdura™ web environments and software services.

1. Network Security & Perimeter Defense

Our public web applications and client portals are shielded by multi-layered perimeter defenses to ensure high availability and resistance against cyber threats:

Cloudflare Web Application Firewall (WAF): All incoming web traffic passes through Cloudflare's global edge network, providing real-time threat intelligence, SQL injection blocking, cross-site scripting (XSS) prevention, and automated bot mitigation.
DDoS Protection: Automated, unmetered Distributed Denial-of-Service (DDoS) protection mitigates volumetric network attacks at Layer 3, 4, and 7 before traffic reaches production host servers.
Managed Server Security: Our web infrastructure is hosted on enterprise Hostinger production servers featuring automated kernel patching, isolated containerization, and 24/7 server monitoring.

2. Data Encryption Standards

Amdura™ strictly enforces end-to-end data encryption across all digital communication and database storage:

Encryption in Transit: All data transmitted between user browsers, client portals, and server endpoints is encrypted using modern Transport Layer Security (TLS 1.3) with HTTP Strict Transport Security (HSTS) forced globally.
Encryption at Rest: Database tables, file storage repositories, and server backups are encrypted using Advanced Encryption Standard with 256-bit keys (AES-256).
PCI-DSS Financial Isolation: Amdura™ never processes or stores raw credit card numbers on local or hosted web servers. All payment processing, tokenization, and subscription billing are offloaded directly to Stripe, a certified PCI-DSS Level 1 Service Provider.

3. Artificial Intelligence & API Security

For applications integrating artificial intelligence endpoints or conversational agents (Aries™):

Zero-Training Data Isolation: AI integrations (utilizing Google Gemini Pro and OpenAI enterprise APIs) operate on paid commercial endpoints configured to prevent prompts, inputs, or client data from being used for public model training.
Secure API Key Management: Third-party API keys, environment variables, and authentication tokens are encrypted and managed through server-level environment configurations. API secrets are never hardcoded in client-side code repositories or public repositories.

4. Operational Controls & Access Governance

Amdura™ enforces strict administrative and identity security practices across all business workflows:

Multi-Factor Authentication (MFA): All internal administrative accounts, Google Workspace portals, server management consoles, and domain DNS controls enforce mandatory hardware-key or authenticator-app Multi-Factor Authentication (MFA).
Principle of Least Privilege: Administrative access to production databases, code repositories, and server environments is restricted on a strict need-to-know basis.
Secure Code Execution: Custom software engineering adheres to OWASP (Open Web Application Security Project) top-10 security guidelines, featuring input sanitization, prepared database statements, and CSRF token verification.

5. Backups, Disaster Recovery & Incident Response

To guarantee business continuity and data integrity for our clients:

Automated Rolling Backups: System databases and website files are automatically backed up on a daily and weekly rolling cycle, with backups retained for up to thirty (30) days in geographically redundant storage locations.
Incident Response & Notification: In the event of a confirmed security incident affecting client data, Amdura™ will notify affected parties within seventy-two (72) hours of confirmation, in compliance with GDPR Art. 33 and US state data breach notification laws.

6. Security Reporting & Vulnerability Disclosure

We welcome responsible security research. If you discover a potential vulnerability or security flaw within any Amdura™ platform, please report it immediately to our operations team:

Amdura™ Operations
Lawrence, MA 01840, United States
Email: legal@amdigitaldesigns.com
Subject Line: Security Vulnerability Disclosure