Security is our top priority
Axify is committed to being the most reliable platform for software development teams. That's why companies of all sizes and backgrounds choose Axify to improve their software delivery performance.
SOC 2 certified
Axify is certified SOC 2 type I. This audit is specifically designed to verify that service providers have implemented the essential internal controls to securely manage data and safeguard the interests and privacy of their clients.
Data protection is central to our operations
We are committed to providing a seamless and secure experience for all our customers and users. Our team adheres to software security best practices to achieve this, and we collaborate with independent firms to test Axify's security.
Customer trust is in our DNA
We apply the highest confidentiality and data security standards.
- OWASP Top 10 for secure software development
- Mandatory code review before merging onto common core
- No access to client account data without prior written notice from the client
- Sensitive data separated from application data
- Data encrypted both at transfer and at rest
Implementing best practices in security measures
- Incident management and rollback protocol
- Multi-tenant application approach
- Active monitoring of system usage
- Static analysis commands to detect vulnerabilities
- We systematically update our libraries to limit exposure to security flaws in an old version
Safe and reliable infrastructure
Axify uses Amazon Web Services (AWS) to host test and production environments. AWS data centers are protected by 24/7 security systems, biometric readers and surveillance cameras. They are SOC 1, SOC 2 and SOC 3 certified, a guarantee of world-class security.
Can we access your code?
The answer is simple: no. Our analysis and calculations use pull request metadata only. You have complete control over the permissions you grant us at all times.
Start your free trial
Find out how Axify can help your development team build a better software engineering culture.
Frequently Asked Questions
Everything you need to know about Axify at a glance
Access to AWS accounts is managed by AWS SSO with Axify's Google organization. Only Axify's operations team can assign members, and only Axify's development team can access development accounts.
Access to Axify integrations (Jira, Azure DevOps, Github, etc.) is managed via access tokens provided by the user or the integration itself. These tokens are then encrypted via a key automatically handled by our infrastructure and are only decrypted when necessary to make calls to the integrations. No member of the development team has access to the access tokens.
Axify only stores the information necessary for its operations. More specifically, this includes a restricted subset of the information offered by the various integrations supported by Axify, such as the title and change history of a Jira item or Azure DevOps work item, the description and list of commits for pull requests, the date of a deployment, or the responses to team morale surveys. Axify does not retain any source code.
Data sources are accessible only from AWS. The production account is managed automatically (infra-as-code) and is accessible only to Axify's development team. Access to the databases is protected by a bastion within the private network. Access to this bastion requires the use of Axify's secure VPN and an SSH key accessible only by the development team.
Axify extensively uses AWS services to manage and deploy its infrastructure. The company's extensive use of Amazon PaaS ensures robust IT security and flexible deployment. Microsoft Teams bots are hosted on Azure. DNS are managed from CloudFlare. Our entire infrastructure is deployed in Canada.
No! All your data is simply gathered from your tools.
Absolutely. Whether you're a small business or a large corporation, Axify adapts to your project's specific needs and the size of your team, providing customized information to help each team stay on track.
No two development teams are alike. Let's find out together if Axify is the right solution for you with a short discovery call. We've guided teams of many sizes, settings and industries toward the ideal configuration of their Axify space to equip them with data that works for them.
Axify starts collecting data and presenting dashboards when your integrations are connected. The only exception is team morale, where we wait two weeks before generating the first report to ensure proper data representation and anonymity. Up to one year's data history is available from the first day of use.
It's very simple! First, we'll help you add your team (Axify users and the developers who will receive daily questions) to your organization. Then, we'll guide you through activating various integrations to begin synchronizing data. Once these two elements are in place, you can analyze and improve your processes.
You bet! We integrate customer support into all our plans via our help center or product specialists. Some plans also include a Slack channel dedicated to supporting your team.
You can find our full privacy policy and notice on cookies by clicking here.
Absolutely! Our team is here to help you choose the right plan or adjust your current plan to suit your needs. Whether it's a change in the size of your team or the level of support you want, contact us to change your plan.
You can cancel your Axify plan at any time. Your account will remain active until your renewal date.