Empowered by
Multi-tenant cloud SaaS, dedicated single-tenant private cloud, or an on-premise bundle for regulated environments — the same API, the same dashboard, the same SLAs across all three.
Multi-tenant, fully managed by us. Best price-per-scan. Day-one access from anywhere.
Dedicated environment in your VPC (AWS, Azure, GCP). Choice of data residency, dedicated keys.
Containerised bundle deployed inside your infrastructure. Full sovereignty for regulated banks & defence.
Every deployment ships with end-to-end encryption, DDoS protection, daily encrypted backups, and AI-driven threat detection — no add-on required, no upsell at renewal.
End-to-end encryption on every API call and dashboard session. Perfect-forward secrecy, HSTS preload, OCSP stapling.
All stored data encrypted with AES-256-GCM. Customer-managed keys (KMS / HSM) on Private Cloud and On-Premise tiers.
Multi-Tbps anycast scrubbing at the edge. Layer-3, 4 and 7 attacks absorbed before they reach your tenant.
Managed Web Application Firewall covering injection, XSS, CSRF, broken auth and the rest of the OWASP catalogue. Custom rules supported.
ML model scores every session and API call in real time — unusual geo, unusual volume, unusual entity-graph deviations get auto-flagged.
Suspected incidents are clustered, deduplicated and ranked. Your security team gets one prioritised queue, not a flood of alerts.
Active-active across two regions per residency zone. RTO < 30 seconds, RPO < 5 seconds. Failover is transparent to your callers.
Daily snapshots, encrypted with separate keys, retained 30 days by default. Point-in-time recovery to any second within the last 7 days.
ISO 27001:2022, GDPR & PIPEDA, PCI-DSS aligned, FINTRAC-ready. Quarterly penetration tests on Private Cloud and Enterprise tiers; reports available on request.
| Capability | Cloud SaaS | Private Cloud | On-Premise |
|---|---|---|---|
| REST API & dashboard | ✓ | ✓ | ✓ |
| Daily list refresh | ✓ | ✓ | Offline bundle |
| Customer-managed encryption keys | — | ✓ | ✓ |
| VPC peering / PrivateLink | — | ✓ | ✓ (internal) |
| Outbound network dependencies | HTTPS only | HTTPS only | None |
| Multi-region failover | Built-in | Optional | Customer-managed |
| Time to live | Same day | ~2 weeks | ~4 weeks |
| SLA tier | 99.99 % | 99.99 % | Per contract |
Your screening data sits in the region you choose. We never replicate across borders without a contracted reason.
Tell us your jurisdictions and infrastructure constraints — we recommend the right deployment in 24 hours.
