Securityby Designnot by afterthought
Every worker call passes through five hardening phases before it reaches an AI model. This page enumerates the controls, the certifications, and the disclosure path for reporting anything we missed.
Request Hardening
Every execute / stream call traverses five deterministic phases. A failure at any phase terminates the request with a typed error code.
Control Domains
Sixteen primary controls grouped across four operational domains. Each is owned by a named team and reviewed every quarter.
Identity & Access
- *SSO via SAML 2.0 / OIDC
- *JWT rotation every 24h
- *Per-worker permission scopes
- *Hardware-backed MFA on admin tier
Cryptography
- *TLS 1.3 only (HSTS preload)
- *AES-256-GCM at rest
- *X25519 key exchange
- *Argon2id password hashing
Data Plane
- *Zero-retention by default
- *Per-tenant encryption keys
- *Redaction on structured PII
- *Signed audit log (WORM)
Infrastructure
- *EU and US hosting options
- *Hardened containers, read-only FS
- *Private mesh networking
- *Third-party pen-testing on the roadmap
Incident Matrix
Three severity tiers map every class of event to a response window and escalation path. Post-mortems are published within 10 business days.
Service outage, auth bypass, active data exposure. 24/7 on-call paging.
Degraded performance, elevated error rates, non-exploitable security finding.
Minor bug, hardening opportunity, cosmetic issues without user impact.
For a production-affecting issue, page the on-call engineer immediately. Do not wait for business hours — SEV-1 rotation is 24/7/365.
oncall@onravetoni.comCompliance Ledger
Audits in force today, audits actively underway, and audits scoped for the next review cycle. No retroactive claims.
Business Continuity
How we keep your automations running through infrastructure failures, data loss events, and disaster scenarios.
Automated Backups
Encrypted snapshots on a regular schedule, with a defined retention window, scaled to each workspace's activity.
Disaster Recovery
Target RTO of 4 hours and RPO of 30 minutes, with failover to a secondary zone as infrastructure scales.
Multi-Zone Redundancy
Delivery infrastructure is designed for multi-zone redundancy as client volume grows, minimizing the impact of a single-zone failure.
Database Replication
Replication and read-replica architecture are part of the infrastructure roadmap to preserve write throughput as usage scales.
Uptime SLA
99.9% monthly uptime target on all /v2/execute and /v2/stream endpoints, with credits issued if measured uptime falls below target.
Live uptime and incident history available at status.onravetoni.com. . Subscribers receive email and webhook alerts within 5 minutes of any incident detection.
Responsible Disclosure
Found something? We run a bounty program and guarantee safe-harbour for good-faith research against production endpoints.
Report
Email security@onravetoni.com with a PGP-encrypted reproducer and affected endpoint.
Triage
Acknowledgement within 48h. Severity classified against the SEV matrix.
Remediate
Fix engineered, deployed, and verified. Reporter invited to validate.
Reward
Bug bounty paid per severity. Credit in the public advisory unless anonymity requested.
Report a
Finding
PGP key and disclosure policy published at the linked endpoint. Bounty range: €250 – €25,000.
security@onravetoni.com