Ask AwraIQ about features, pricing, onboarding, login, integrations, security, demos, mobile apps, automation, reports, or support.
Compliance Status
Operational controls are active and reviewable.
Use this public status center to review AWRA OpsHub’s security, privacy, audit, retention, and governance posture before procurement, legal, or internal risk review.
Last Reviewed
August 30, 2026
Public Posture
Available
Review Mode
Evidence-led
Control Coverage
Compliance controls by operating area.
The status below describes product and operational controls available in AWRA OpsHub. It is not a certification claim; formal contract terms remain governed by the applicable customer agreement.
Organization Isolation
Application records, reports, audit logs, and security views are scoped by organization context.
Identity & MFA
MFA setup, recovery code rotation, privileged MFA enforcement, and login activity monitoring are active controls.
Audit Logging
Security, file upload, deleted-record, impersonation, retention, and privacy events are captured for review.
Data Retention
Organization retention policies prune eligible records and write purge evidence into audit history.
GDPR Workflows
Organization admins can export user personal data and perform audited erasure/anonymization workflows.
Webhook Protection
Webhook endpoints use throttling and continue to rely on signature and organization isolation tests.
File Controls
Sensitive uploads validate detected MIME type, store private files, randomize names, and write upload audit records.
Vendor Review Pack
Trust center documents, DPA overview, SLA summary, and security whitepaper are public.
Assessor View
A control matrix for practical review.
Compliance reviewers usually need to map controls to owners and evidence. This matrix gives teams a quick starting point before requesting deeper documentation.
| Area | Controls | Evidence | Owner |
|---|---|---|---|
| Access control | Roles, permissions, plan gates, admin policies | Audit logs, login activity, device trust, impersonation records | Security / Organization admins |
| Data protection | Organization boundaries, private disks, encrypted MFA secrets, upload validation | File upload logs, security tests, DPA overview | Platform engineering |
| Privacy rights | User export, erasure/anonymization, token/session revocation | Privacy audit events, GDPR export payloads | Organization admins / Support |
| Retention | Organization retention policies, scheduled prune command, dry-run reporting | Compliance audit record with cutoff and affected rows | Compliance / Platform ops |
| Operational monitoring | Status page, scheduler heartbeat, health checks, system logs | Status board, service health, system log retention | Operations |
| Procurement review | Public trust resources, legal references, evidence packs | Trust Center, DPA, SLA, Security Whitepaper | Commercial / Legal |
Privacy & Evidence
Review paths for legal, IT, and procurement teams.
AWRA supports evidence-based reviews through audit logs, compliance evidence packs, data retention policies, login activity monitoring, device trust controls, and GDPR export/erasure workflows.
Security Whitepaper
Architecture, access control, encryption, operational hardening, and secure delivery practices.
Data Processing Addendum
Controller and processor responsibilities, subprocessor governance, and transfer safeguards.
SLA & Uptime
Availability commitments, incident lifecycle, support paths, and service continuity expectations.
Trust Center
A single hub for privacy, security, reliability, compliance, and procurement review resources.
Data Rights Workflow
GDPR requests keep evidence without keeping unnecessary identity data.
The user export and erasure path is designed for organization admins handling subject requests inside operational systems where records, approvals, and financial history still need integrity.
01
Locate
Find the organization user subject and confirm the request belongs to the correct organization context.
02
Export
Generate a structured personal-data export that excludes secrets and includes profile, assignments, devices, and audit activity.
03
Erase
Anonymize identifiers, revoke access, remove role assignments, soft-delete the account, and preserve operational integrity.
04
Evidence
Write a privacy audit event with actor, target, organization, request, and hashed original identifiers.
Review Readiness
What is ready for review now.
MFA and recovery-code rotation are implemented.
Privileged accounts cannot bypass recommended MFA.
Login activity and failed known-account attempts are monitored.
File uploads are audited for sensitive private workflows.
Deleted organization records write delete audit coverage.
Retention purges produce system compliance evidence.
GDPR export and erasure workflows are available for organization users.
Public trust, DPA, SLA, and security resources are published.
Smart Recommendations
Build the review packet around the evidence your assessor needs next.
Once the control checklist is visible, the fastest path is routing each stakeholder to the right proof: trust hub for procurement, DPA for legal, uptime for IT, and governance detail for administrators.
Recommended review route
From control status to approval evidence.
01
Start with active controls
Match implemented security, privacy, retention, and evidence controls to internal review areas.
02
Open the legal trail
Send DPA, privacy, and subprocessor context to legal before procurement stalls.
03
Check resilience posture
Give IT and operations the uptime, incident, and continuity terms they need.
04
Escalate the gaps
Use the trust hub or support request for questionnaires, annexes, or architecture walkthroughs.
Assessor hub
Trust Center
Give procurement, legal, IT, and finance reviewers one route into the full evidence library.
Legal review
Data Processing Addendum
Open processor duties, subprocessor governance, transfer safeguards, and privacy responsibilities.
Resilience proof
SLA & Uptime
Review availability commitments, incident lifecycle, communication expectations, and continuity terms.
Assessors also open
Security architecture, operational security, governance controls, and device policy.
Data Rights
Export and erasure workflows
Organization user personal-data export and audited erasure/anonymization support internal privacy operations.
Evidence
Audit and retention records
Sensitive changes, purge evidence, file uploads, deleted records, and authentication events are reviewable.
Governance
Controls under active hardening
Security controls are maintained as part of ongoing product hardening, release review, and operational monitoring.
Need this mapped to your internal questionnaire?
Send your review checklist and the team can help map AWRA controls, public resources, and customer-specific contractual needs.