Information Security Policy
Protecting customer and company information
Last updated June 20, 2026
HEXANGO PRIVATE LIMITED maintains an information security program aligned with industry best practices to protect the confidentiality, integrity, and availability of data processed through foretale.ai.
Security governance
Executive leadership assigns ownership for information security. Policies are reviewed annually. Risk assessments inform control selection and prioritization.
Infrastructure security
foretale.ai is hosted on Amazon Web Services (AWS) in us-east-1. Production workloads run in isolated tenant configurations with organization-scoped storage, database access, and configuration.
- Compute: AWS Lambda and Amazon ECS on Fargate for serverless and container workloads.
- Data stores: Amazon RDS (PostgreSQL, SQL Server), Amazon DynamoDB, Amazon S3, and Redis.
- Identity: Amazon Cognito for user authentication and JWT-based API authorization.
- Secrets: AWS Secrets Manager for credentials; no secrets in source code or images.
Encryption
Data is encrypted in transit using TLS 1.2+. Database connections use encrypted channels. Customer files are stored in private S3 buckets with presigned URL access and short-lived credentials.
Monitoring and logging
We maintain audit logs for authentication events, administrative actions, and critical application operations. Logs are retained per our Data Retention Policy and reviewed for security anomalies.
Vendor and subprocessors
Third-party providers with access to customer data are evaluated for security posture and bound by contractual obligations. Primary infrastructure subprocessors include Amazon Web Services. AI inference may use Amazon Bedrock; optional tracing may use LangSmith when enabled.
Employee access
Access to production systems follows least-privilege principles and is limited to personnel with a documented business need. See our Access Control Policy.