Security posture — hardened

Locked downby design.

so you never have to think about it.

Security is foundational to Hyegro. We protect your business data with enterprise-grade infrastructure and follow industry best practices at every layer of our stack.

Transit

TLS

Secrets

App-layer encrypted

Sign-in

Authenticator MFA

Access

Role-based

Breach notice

< 72h

Six layers between threats and your data

One lock is a target.

six layers are a fortress.

dnsInfrastructure

layer/01

All data is backed up daily.

Daily backups

enhanced_encryptionEncryption

layer/02

Data is encrypted in transit with TLS and stored on encrypted infrastructure. Sensitive values such as MFA secrets and integration tokens get an extra layer of application-level encryption with a dedicated key.

TLS in transitEncrypted storageApp-layer for secrets

fingerprintAuthentication

layer/03

Passwords are hashed with bcrypt, two-factor authentication works with any authenticator app, and every sign-in is recorded in a login history you can review.

bcrypt hashing2FA via authenticatorLogin history

admin_panel_settingsAccess Controls

layer/04

Role-based access control is built into every Hyegro workspace. Records carry who created and last changed them, activity is kept on a timeline, and AI assistants connected through MCP only see what the signed-in person can see.

Workspace RBACCreated/updated byActivity timelinePermission-scoped MCP

bug_reportVulnerability Management

layer/05

Found something? Email security@hyegro.com. We acknowledge reports within 48 hours and treat confirmed vulnerabilities as our top engineering priority.

Responsible disclosure48h acknowledgementFixes prioritised

crisis_alertIncident Response

layer/06

Our incident response team follows a documented playbook for security events. Affected customers are notified within 72 hours of a confirmed breach, per regulatory requirements.

Documented playbook72h customer notificationRegulatory compliance

policy_alert Responsible disclosure

Found a weakness?

tell us before anyone else.

If you discover a security vulnerability, please report it to security@hyegro.com. We appreciate responsible disclosure and will acknowledge reports within 48 hours.

48h

acknowledgement

72h

breach notification

General questions? support@hyegro.com