Security & sovereignty

    Built for regulated hardware.

    Koddex sets permissions on every item, logs every change with who made it, person or agent, and hosts your data in the European Union. Each user, partner and agent sees only what its access rights allow.

    EU hosting

    Exclusively in the European Union, in the AWS Europe (Ireland) region. No customer data leaves the EEA without your prior written agreement.

    GDPR

    Processing under GDPR, with contractual commitments to notify you and challenge any non-EU request for access to your data.

    Encryption

    AES-256 at rest and TLS 1.2+ in transit, with keys managed under Koddex control.

    Identity

    SSO with your identity provider and MFA enforced for privileged access.

    Testing

    Monthly vulnerability scans, annual independent penetration tests, anti-malware analysis of uploaded files.

    Infrastructure

    The hosting infrastructure (AWS Europe) is certified against ISO/IEC 27001.

    01

    Permissions per role and per partner

    A supplier works on the items you share with it and sees nothing else. Every change is logged.

    8

    named rights per access tag

    Classified and export-controlled data

    The standard service is not accredited for classified or export-controlled data without a prior analysis and a written agreement. Ask us about specific hosting.

    Request the security pack.

    Hosting, encryption and access control, documented for your IT and security review.