Trust Center

Customer data is encrypted at rest and in transit, with encryption keys managed in the cloud provider key management service and rotated annually. Information is classified according to a defined scheme, and production data of any sensitivity level is confined to the production environment unless pre-approved for a specific use by the customer.

FalkorDB's network and information assets sit behind a defined perimeter implemented with firewalls and routers, preventing unauthorised external access. The production environment is segregated from other environments using firewall mechanisms, and all remote access to internal networks runs over encrypted tunnels.

Security events are directed to the VP R&D, who heads FalkorDB's Incident Response Team. Every reported event is logged immediately with a unique event number recording detection time, notification origin and description, then assessed and categorised as an Incident, Vulnerability, Event or Unknown, and prioritised by expected impact. Events are tracked through containment, corrective action and formal closure, and the CISO owns any required reporting to customers and external authorities.

FalkorDB maintains a Business Continuity and Disaster Recovery plan owned by a designated Disaster Management Team with defined roles and responsibilities. The plan is tested annually, employees involved in recovery receive annual training on their duties, and backup restoration is verified annually.