Security you can check for yourself

Your own space

Each organization runs in its own cloud project, with its own encryption keys and database scope. No customer shares a project or a key with another.

Signed files

Every delivered report is signed. Anyone can check that a file came from us and hasn’t changed, here or offline.

Health data

Patient data goes only to models covered by a business associate agreement, through an input and output screen that fails closed.

Every copy recorded

Who received each report, through which channel and for what purpose is kept in a signed, chained log. A recall stops every link and download at once and asks outside recipients to confirm each copy destroyed or returned.

AI with limits

Models draft and read. Code computes every number, and people approve what your rules say they must.

Security operations

The same team that builds the products runs a security operations center, and reviews our own systems first.

Ready for post-quantum

Transmittal records and traces can carry an ML-DSA-65 signature beside ECDSA. Connections to the web app, the API, the relay and SFTP use hybrid X25519 and ML-KEM-768 key exchange where the other side supports it.

Keys of your own

Each organization’s data at rest is encrypted under keys no other customer shares, rotated every 90 days. Files you share can also be wrapped by your own key service, as ZTDF or with Microsoft Purview, so you decide every open.

Files checked at the door

Uploads are checked before anything reads them: allowed types only, a malware scan that fails closed, archive bombs and macros held. Damaged files are repaired, and what was lost is counted.

Verify a file

Every report DataLogiX delivers is signed: PDFs with an embedded PDF signature, and Word, Excel and PowerPoint files with a content credential. Drop a file here to check it, without signing in.

Prefer not to upload anything? Open a PDF in Adobe Acrobat to see its signature, or check an Office file with a Content Credentials tool, against our certificate chain.

Report a vulnerability

If you find a security issue in an EVAS product or website, tell us privately and give us a reasonable time to fix it. We won’t pursue anyone who reports in good faith.