ISO 9001 and ISO/IEC 27001
Quality and information security management: what the standards cover and our certificates.
Trust Center
Auvia Gateway Trust Center
Everything your security, compliance and procurement teams ask for in one place: certifications, how personal data in SMS traffic is protected, and the controls built into the platform.
ISO 9001ISO/IEC 27001GDPR
Compliance
Certifications and regulations
GDPR and data protection
Who is responsible for which data, and how the platform protects personal data in SMS traffic.
Privacy policy
What this website collects through the demo form, and your rights.
Terms and conditions
The terms for using this website.
Security controls
What every installation includes
Controls built into the platform, the same in the cloud and on-premise.
Access
- Permission-based roles for every panel user
- IP allowlists per SMPP credential and per API key
- Automatic IP blocking after repeated failed binds
- API keys stored only as hashes
- Customer portal data isolated per account by the server
Encryption
- SMPP over TLS for customers and suppliers that offer it
- HTTPS for the panel, the portal and every API
- Webhook URLs restricted to public HTTPS hosts
- Webhooks signed with HMAC-SHA256 and a timestamp
Accountability
- Audit log of every user action and sign-in, kept 90 days
- Message records down to the SMPP PDU
- Versioned releases with versioned database migrations
- Exports of CDRs and audit records
Data handling
- Dedicated installation per customer, with its own database
- On-premise option: traffic stays on your servers
- AI console masks numbers, names, texts and IPs before anything leaves
- Messages acknowledged only after they are stored
FAQ
Trust questions
Which certifications does Auvia hold?
ISO 9001 for quality management and ISO/IEC 27001 for information security management. Certificate details are on the ISO certification page and available on request.
Where is our traffic stored?
Every installation is dedicated to one customer with its own database. On-premise installations keep traffic and personal data on your servers.
Does any data go to AI providers?
Only masked data. Before anything leaves the platform, phone numbers, senders, texts, emails, customer and supplier names, system IDs and IP addresses are replaced by placeholders. Masking can be turned off only for a local model on your private network.
Can we get documents for our security review?
Yes. Ask through the contact form for certificates and security documentation during your evaluation.
Keep exploring
