AES-256 encryption, PKI document signatures, 100+ RBAC nodes, immutable audit trails, and optional on-premise deployment.
Data encrypted at rest with AES-256-GCM. TLS 1.3 in transit. Envelope encryption with a two-layer KEK/DEK hierarchy. Keys managed in Azure Key Vault with HSM-backed protection. No key is ever stored alongside the data it protects.
Every document processed through Accute receives an RSA-SHA256 cryptographic signature. Tamper detection is real-time. Signed documents are legally binding under eIDAS (EU), eSign Act (US), and IT Act 2000 (India).
Over 100 granular permission nodes covering every workflow action, document operation, client record, and administrative function. Role hierarchy with platform-level and tenant-level separation. Teams and scope modifiers for cross-entity access.
Every action — user login, document upload, workflow step, approval decision, permission change — is logged with user identity, IP address, device fingerprint, and millisecond timestamp. HMAC-sealed, hash-chained. Immutable.
JWT-based session tokens with short expiry and refresh rotation. bcrypt password hashing with configurable cost. MFA via TOTP (AI Standard and above). SAML 2.0 and OIDC SSO on AI Standard and above. CAC-level admin is completely isolated from the customer-facing identity plane.
Strict multi-tenant isolation at the database row level. Every query is scoped to the authenticated firm. No shared connection pools between tenants. Schema-level separation where applicable. AI agents operate in isolated execution contexts.
AI Enterprise customers can run Accute entirely on their own infrastructure. Bring your own Kubernetes cluster, database, and object storage. All AI agents run as local Docker containers with no external egress required. Air-gap compatible.
Accute is being built toward SOC 2 Type II certification. GDPR and CCPA controls are built into the platform layer — data subject access requests, consent logging, retention policies, and right-to-erasure workflows. Regional data residency on AI Enterprise.
Sentinel monitors all platform activity in real time. It flags anomalous login patterns, unusual data export volumes, and privilege escalation attempts before they become incidents.
Guardian runs inside on-premise deployments. It enforces data perimeter policies, detects exfiltration attempts, and maintains an air-gap-compliant log that never leaves the customer network.
Need a detailed security architecture review before onboarding? Request access and ask for our security pack.
Request Access