Security & trust
Your financial data deserves real protection. Here is exactly how Ayrexa handles it.
Data protection
All traffic is encrypted in transit (TLS), and session cookies are httpOnly and never readable by JavaScript. Rate limiting protects login and other sensitive endpoints against brute-force attempts.
Tamper-evident audit trail
Every change in Ayrexa is logged automatically and cryptographically chained — each entry includes the hash of the one before it, so the whole history can be independently re-verified at any time. Entries can never be edited after the fact, only appended to.
Role-based access control
Give every team member exactly the access they need — Admin, Accountant, or Viewer today, with Departments and Legal Entity scoping available on Enterprise. Every tenant is strictly isolated from every other tenant.
POPIA-ready
Built-in self-service tools let anyone export their own basic account data instantly, and submit a reviewed access or deletion request — handled by a real Information Officer, not an automated black box.
Infrastructure
Ayrexa runs on Microsoft Azure (South Africa North region) with a private, VNet-isolated database — your data never sits on a publicly-reachable database server.
Support & uptime commitment
We're a growing team, so we'd rather tell you exactly what to expect than make vague promises.
Uptime target
We target 99.9% monthly uptime for the core app and API. It's a target, not a contractual guarantee, and there's no historical uptime page yet — it's on our roadmap.
Support response time
Email support replies within 1 business day on SME and Mid-Market, and within 4 business hours on Enterprise.
Have a specific security question, or need a document for your own vendor review process? Get in touch.