Security
Security you can verify
Governance is only as good as the trust behind it. Pravadh GovernX is built on enterprise-grade encryption, tamper-evident audit trails and full OAuth transparency.
AES-256 encryption
All data is encrypted at rest and in transit using AES-256 — the same standard trusted by governments and financial institutions worldwide.
- Encrypted at rest
- Encrypted in transit (TLS 1.2+)
- Managed key rotation
SOC-2 ready
Our controls, processes and infrastructure are built to meet SOC-2 requirements across security, availability and confidentiality.
- Security controls
- Availability monitoring
- Confidentiality safeguards
SHA-256 audit chain
Every governance action is written to a tamper-evident, SHA-256 hashed audit chain — so you always have a verifiable history of who did what.
- Tamper-evident logs
- Cryptographic hashing
- Full action history
You always know what we access
We request the minimum OAuth scopes needed — and we tell you exactly why each one is used. Nothing more, nothing hidden.
Required to extract and unify data from connected platforms.
Required to monitor limits and trigger real-time alerts.
Only used when you explicitly approve a governance action.