LoginGet a Demo

Governance and audit controls
for regulated supply chains

Agistix enforces least-privilege access through SAML and OIDC single sign-on, and logs every administrative action to an immutable audit trail.

Request a DemoTalk to an Expert

Robust access, audit, and retention controls

Role-based access & identity

Single sign-on through SAML and OIDC, governed by role-based permissions.

  • Customer administrators define roles, scope, and approval workflows across the platform
  • Federated single sign-on connects to your existing identity provider, including Okta, Microsoft Entra ID, and Ping Identity
  • Multi-factor authentication is enforced at the identity provider layer
  • Every user, action, and record is governed by the same role-based permission structure

Audit logging & evidence export

Every administrative action and configuration change captured to an immutable log.

  • Data exports, configuration changes, and material user actions are logged automatically
  • Logs are retained according to contract terms and exportable on demand
  • Evidence packages support internal review, audit response, and regulatory requests

Data retention & lifecycle controls

Retention windows and legal holds configured by record type, enforced automatically.

  • Customer administrators configure retention windows and archival rules for relevant record types
  • Legal-hold flags suspend standard retention rules when litigation or investigation requires it
  • Retention enforcement is automatic, with exceptions logged for review

Compliance posture

Inherits AWS's SOC 2 Type II, ISO 27001, and FedRAMP authorizations at the infrastructure layer.

  • Self-certified at CMMC Level 1 at the organizational level
  • Regular vulnerability scans via Acunetix and AWS tools support GDPR, HIPAA, and PCI DSS obligations
  • Full evidence, including the System Security Plan and policy library, is available upon request

What our customers say

“Agistix stands out for their exceptional support – their team is responsive, collaborative, and consistently goes above and beyond to ensure our success. Their partnership has made a measurable impact on our performance and service levels, and they truly exemplify what it means to be a trusted supply chain partner.”
Biopharma & Healthcare Provider

More to explore across the platform

  • Security

    Enterprise-grade protections securing every layer of the platform, from encryption to identity management.

  • Trust Center

    Full compliance evidence, policy library, and audit documentation in one place.

  • Analytics & Reporting

    Dashboards and reports built on the same audit and evidence data your compliance team relies on.

Real clients, real results

Case StudyTransforming Logistics Oversight and Trade Compliance in High-Tech ManufacturingCase StudyDigitizing Logistics for Government ServicesCase StudyHow a Global Software Leader Found a True Partner for Logistics Management

Top-tier partnerships

Keycloak
AWS IAM
Okta
Invicti
Auth0
Microsoft

See Agistix in action

See how access controls, audit logging, and data retention work together inside the Agistix platform.

Request a Demo

FAQs

  • Does Agistix support single sign on (SSO)?

    Yes. Agistix supports federated single sign-on through SAML and OIDC, connecting to identity providers including Okta, Microsoft Entra ID, and Ping Identity, with multi-factor authentication enforced at the identity provider layer.

  • What gets recorded in Agistix's audit log?

    Every configuration change, data export, permission change, and record modification is captured to an immutable audit log, timestamped and attributed to the user who made it. Logs are retained per contract terms and exportable on demand.

  • Can data retention rules and legal holds be configured by record type?

    Yes. Customer administrators configure retention windows, archival rules, and legal-hold flags on the shipment record types relevant to their compliance regime, with enforcement automatic and exceptions logged.

  • Is Agistix SOC 2 or FedRAMP compliant?

    Agistix inherits AWS's SOC 2 Type II and FedRAMP authorizations for infrastructure-layer controls, and is self-certified at CMMC Level 1 at the organizational level.