Security designed for critical infrastructure
Hosted on AWS with support for any global region.
All traffic is HTTPS/TLS 1.2+ secured. Data in transit and metadata at rest are encrypted.
Security controls align with COBIT 5 and ISO 27001 frameworks, approved by leading European utilities.
Regular tests performed by certified specialists to identify and eliminate vulnerabilities.
Multi-layer AWS Security Groups mimic DMZ configurations. Everything runs in protected VPCs.
GPS and image data are separated and pseudonymized to protect sensitive information.
Daily backups stored for 30 days with manual failover options ensuring full recovery across AWS European regions.
Tools like AWS GuardDuty and API Gateway protect against intrusion and DDoS attacks with continuous threat detection.
Supports Azure Active Directory, SSO, and Multi-Factor Authentication for secure identity management.
Our security philosophy
Security at Arkion is not an afterthought—it’s a foundation. Every design decision, from architecture to deployment, follows a principle of least privilege and maximum transparency. Each client environment is isolated, each user authenticated through federated systems, and each dataset treated with the same rigor as critical infrastructure.
We believe that utilities deserve technology partners who treat their systems with the same care they do. That’s why Arkion invests in continuous audits, third-party validation, and proactive monitoring to ensure that your data—and your trust—remain uncompromised.
FAQ
The platform follows COBIT 5 and ISO 27001 principles, with AWS compliance including ISO 27017, 27018, and SOC 2.
On AWS servers in customer-specified regions, ensuring data residency compliance. We can accomodate any area of the globe according to your needs.
Custom security configurations—like dedicated VPNs, IP whitelisting, or encrypted object storage—can be arranged per contract
Manual failover procedures enable Arkion to restore services quickly in another AWS region.
Yes. All data in transit uses HTTPS/TLS 1.2+, and all metadata at rest is encrypted with AWS KMS.
Monthly vulnerability scans and regular independent penetration tests are performed.
Yes. The system can mirror enterprise-level security frameworks and connect to your AMS or cloud setup securely.
No. Authentication integrates with customer identity providers like Azure AD, ensuring no password data is stored.
Full daily backups of metadata and user data are retained for 30 days and can be restored on request.
Learn more about our approach to security
