Certifications

SOC 2 certified

Axify is certified SOC 2 type I. This audit is specifically designed to verify that service providers have implemented the essential internal controls to securely manage data and safeguard the interests and privacy of their clients.

Soc 2 - Security page image
Keeping your data safe

Data protection is central to our operations

We are committed to providing a seamless and secure experience for all our customers and users. Our team adheres to software security best practices to achieve this, and we collaborate with independent firms to test Axify's security.

check-verified-01

Customer trust is in our DNA

We apply the highest confidentiality and data security standards.

  • check-circle OWASP Top 10 for secure software development
  • check-circle Mandatory code review before merging onto common core
  • check-circle No access to client account data without prior written notice from the client
  • check-circle Sensitive data separated from application data
  • check-circle Data encrypted both at transfer and at rest
axify-sécurité-des-données-métriques d'ingénierie logicielle
bar-line-chart-2

Implementing best practices in security measures

  • check-circle Incident management and rollback protocol
  • check-circle Multi-tenant application approach
  • check-circle Active monitoring of system usage
  • check-circle Static analysis commands to detect vulnerabilities
  • check-circle We systematically update our libraries to limit exposure to security flaws in an old version
axify-sécurité-des-données-métriques d'ingénierie logicielle
lock-03

Safe and reliable infrastructure

Axify uses Amazon Web Services (AWS) to host test and production environments. AWS data centers are protected by 24/7 security systems, biometric readers and surveillance cameras. They are SOC 1, SOC 2 and SOC 3 certified, a guarantee of world-class security.

axify-sécurité-des-données-métriques d'ingénierie logicielle
code-snippet-02

Can we access your code?

The answer is simple: no. Our analysis and calculations use pull request metadata only. You have complete control over the permissions you grant us at all times.

axify-sécurité-des-données-métriques d'ingénierie logicielle

Start your free trial

Find out how Axify can help your development team build a better software engineering culture.

Frequently Asked Questions

Everything you need to know about Axify at a glance

Access to AWS accounts is managed by AWS SSO with Axify's Google organization. Only Axify's operations team can assign members, and only Axify's development team can access development accounts.

Access to Axify integrations (Jira, Azure DevOps, Github, etc.) is managed via access tokens provided by the user or the integration itself. These tokens are then encrypted via a key automatically handled by our infrastructure and are only decrypted when necessary to make calls to the integrations. No member of the development team has access to the access tokens.

Axify only stores the information necessary for its operations. More specifically, this includes a restricted subset of the information offered by the various integrations supported by Axify, such as the title and change history of a Jira item or Azure DevOps work item, the description and list of commits for pull requests, the date of a deployment, or the responses to team morale surveys. Axify does not retain any source code.

Data sources are accessible only from AWS. The production account is managed automatically (infra-as-code) and is accessible only to Axify's development team. Access to the databases is protected by a bastion within the private network. Access to this bastion requires the use of Axify's secure VPN and an SSH key accessible only by the development team.

Axify extensively uses AWS services to manage and deploy its infrastructure. The company's extensive use of Amazon PaaS ensures robust IT security and flexible deployment. Microsoft Teams bots are hosted on Azure. DNS are managed from CloudFlare. Our entire infrastructure is deployed in Canada.

No! All your data is simply gathered from your tools.

Absolutely. Whether you're a small business or a large corporation, Axify adapts to your project's specific needs and the size of your team, providing customized information to help each team stay on track.

No two development teams are alike. Let's find out together if Axify is the right solution for you with a short discovery call. We've guided teams of many sizes, settings and industries toward the ideal configuration of their Axify space to equip them with data that works for them.

Axify starts collecting data and presenting dashboards when your integrations are connected. The only exception is team morale, where we wait two weeks before generating the first report to ensure proper data representation and anonymity. Up to one year's data history is available from the first day of use.

It's very simple! First, we'll help you add your team (Axify users and the developers who will receive daily questions) to your organization. Then, we'll guide you through activating various integrations to begin synchronizing data. Once these two elements are in place, you can analyze and improve your processes.

You bet! We integrate customer support into all our plans via our help center or product specialists. Some plans also include a Slack channel dedicated to supporting your team.

You can find our full privacy policy and notice on cookies by clicking here.

Absolutely! Our team is here to help you choose the right plan or adjust your current plan to suit your needs. Whether it's a change in the size of your team or the level of support you want, contact us to change your plan.

You can cancel your Axify plan at any time. Your account will remain active until your renewal date.

Avatar group

Any more questions?

Our team is here to help.