Secure today. Enable tomorrow.
Aavishield sees sensitive traffic on your devices. Here is how we protect the policy we enforce and the data we see.
If your security team has questions beyond these, we are happy to walk through the architecture in detail.
Policy bundles are signed with Ed25519 and verified on the device, so an agent only ever enforces policy that came from your console.
Data loss prevention records findings and never blocks. Security gets visibility without breaking the way people work.
Every organisation's policy, devices and findings are scoped to that organisation and never mixed.
Per-organisation certificate authority keys are stored encrypted at rest.
Screenshots and files are served only through short-lived signed links, visible to admins of that organisation.
Internal scanning services only accept requests carrying a shared secret, never open to the internet.
Admins confirm every sign-in with an emailed code or an authenticator app. Organisations can require app-based two-factor for everyone, and review signed-in sessions.
Sign-in protection
Signed-in sessions
Give admins, analysts, managers and read-only users exactly the access they need, and keep an audit log of what they change.
Teams
2
Use teams to scope policy
Monitoring is powerful. These defaults keep it proportionate.
Screenshots are off by default and enabled per device by your organisation.
We keep the finding and a short masked preview, not a copy of the file.
Blur screenshots and set how long monitoring data is kept.
Admins with the right permission can delete sessions and screenshots.
The employee portal shows people their devices and what was blocked.
Personal data is never sold or used for advertising.
We welcome reports from security researchers. Please give us reasonable time to fix an issue before disclosing it, and do not access other customers' data.
Something else? Ask our team.
In Aavishield's cloud infrastructure, scoped to your organisation. Ask us during the demo about hosting details for your region.
Install the agent, choose a policy, and see every decision in one console. A pilot can be live in an afternoon.