Welcome to the Onyx Platform Trust Center. Onyx Platform provides Software as a Service (SaaS). This Trust Center is designed to give you a clear understanding of our security and trust practices.
At Onyx Platform, we are committed to maintaining a robust control environment built on integrity and ethical values. Our culture, governance, hiring, and onboarding practices, along with our ethical and behavioral standards, reinforce these values. We also prioritize the competence of our employees, ensuring they have the necessary knowledge and skills to support our objectives. Our management philosophy emphasizes a purpose-driven, risk-based approach to achieving company objectives and commitments.
We demonstrate our commitment to security through independent attestations. Onyx Platform has achieved a SOC 2 Type 2 report for our Software as a Service system. This report confirms that our controls are designed and operating effectively to provide reasonable assurance that our service commitments and system requirements are met. The scope of this report specifically covers the Trust Services Criteria for Security, Availability, and Confidentiality.
- Security: We protect information and systems against unauthorized access, disclosure, and damage.
- Availability: We ensure that information and systems are available for operation and use to meet our objectives.
- Confidentiality: We protect information designated as confidential.
Our trust program also considers applicable requirements of the HIPAA Security and Breach Notification Rules. While we utilize subservice organizations for services like computing and storage, our SOC 2 report focuses on Onyx Platform's controls, assuming the effectiveness of complementary controls from these subservice organizations and user entities.
This overview provides a high-level summary of our dedication to security and trust. We invite you to explore the rest of the Trust Center for detailed information on our specific policies, controls, and practices.
Risk Profile
We have secure, reliable hosting that customers can depend on. We are happy to provide details about our risk mitigation practices and recovery objectives upon request.
Self-Assessments
We are working on our security compliance. We can provide completed questionnaires upon request.
AI
We take the usage of AI seriously in our organization and work to ensure security and reliability of the AI.
ESG
We prioritize and take environmental, social, and governance (ESG) considerations seriously in our operations and decision-making processes.
Legal
We take legal matters seriously and we always engage our legal counsel to review all commercial activities. Please contact us if you have any questions.
Security Grades
We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.

