Overview
Two layers of control, both audited
Security at Roborax operates on two layers: the platform (infrastructure, encryption, access) and the operators (vetting, NDAs, monitoring). Both are audited by independent third parties. Reports are available under NDA to active and prospective customers.
For surgical, defense, and ITAR-restricted work, additional controls apply per program. Clearance-eligible operators, air-gapped collection environments, and per-session audit trails are all standard for those engagements.
Data handling
How your data moves through Roborax
Per-program access controls. Encrypted throughout. Deleted on demand.
Encryption
AES-256 at rest. TLS 1.3 in transit. Per-program keys held in a hardware-backed KMS.
Access control
Per-program ACLs. Least-privilege enforced via SSO. Operators see only the program they’re assigned to.
Retention
Your data is yours. Deletion on demand, no archive copies. Default retention is project lifetime.
Audit logging
Every data access logged with operator, timestamp, and session ID. Logs retained for the program duration plus 12 months.
Operator security
The people side of the data
Operators are vetted, contracted per program, and monitored during sessions.
Background checks
All operators undergo background checks before joining the network. Re-verified annually.
Per-program NDA
Signed before any program access. NDA terms negotiated per customer.
Clearance available
ITAR-eligible US citizen operators and HIPAA-trained clinicians available for restricted programs.
Session monitoring
Operator behavior during sessions monitored in real time. Anomalies flagged automatically.
What our partners say
Need our SOC 2 report?
security@roborax.ai gets you the report and audit history within one business day.