ArchiveHub treats historical enterprise information as governed business data. This Trust Center summarizes the security, privacy and lifecycle principles that guide ArchiveHub deployments and customer engagements.
Security and governance by design
ArchiveHub supports appropriately configured identity, authorization, encryption, audit and information-lifecycle controls. The precise controls, responsibilities and service commitments applicable to a customer environment are defined by its deployment architecture and governing agreement.
Identity and access
- Supported enterprise identity and single sign-on configurations
- Role-based and appropriately granular authorization designs
- Least-privilege administration and separation of responsibilities
- Reviewable access and relevant activity records
Data protection
- Encryption in transit and at rest within appropriately configured deployments
- Controlled access to structured data, documents, attachments and metadata
- Environment-specific backup, recovery, monitoring and resilience planning
- Data-location and deployment choices evaluated against customer requirements
Information lifecycle
- Configured retention and legal-hold processes where applicable
- Governed access to preserved historical information
- Evidence-based reconciliation and business validation for transformation or retirement programs
- Controlled disposition based on authorized policies and applicable obligations
Shared responsibility
Security outcomes depend on the selected hosting model, customer configuration, identity provider, connected systems, operational procedures and assigned responsibilities. ArchiveHub works with customers to define these boundaries rather than treating platform capabilities as automatic compliance guarantees.
Privacy
Website inquiries are handled according to the ArchiveHub Privacy Statement. Customers remain responsible for determining the lawful basis, retention requirements and authorized uses applicable to their enterprise information.
Report a security concern
To report a suspected vulnerability or security concern, email [email protected]. Include a concise description, affected location or component, reproduction information and your contact details. Do not include credentials, customer records, regulated data or other sensitive information in the initial message.
Important: This public page is a transparency summary, not a certification statement, audit report, service-level commitment or contractual security schedule. Additional security documentation may be made available during an appropriate customer review process.