LoginGet a Demo

Enterprise-grade security
for logistics data

Agistix secures supply chain data through AES-256 encryption, Keycloak-based identity management, and continuous vulnerability management – all hosted on AWS and maintained by dedicated DevOps and SecOps teams.

Request a DemoTalk to an Expert

Security built for complex supply chains

Data protection

AES-256 at rest through AWS KMS, TLS 1.2+ in transit through AWS Certificate Manager.

  • Encrypts data at rest with AES-256 and in transit with TLS 1.2 and TLS 1.3
  • Keys generated, rotated, and access-controlled through AWS KMS with strict admin/user separation
  • Tenant data logically isolated at the application and data layers

Identity & access

Keycloak-based identity framework with SSO federation via Okta, Microsoft Entra ID, and Auth0.

  • Keycloak core identity framework with SSO federation via Okta, Microsoft Entra ID, and Auth0
  • MFA available across all SSO integrations, with role-based access controls
  • Backed by AWS IAM for infrastructure-level access control
  • IP whitelisting available for network-level access control

Vulnerability management

Continuous automated scanning via Invicti, SonarQube, and Trivy across the SDLC.

  • SonarQube static code analysis as a mandatory pre-merge gate
  • Container images scanned with Trivy
  • Invicti web application scanning on a scheduled SDLC-aligned cadence
  • Findings are reviewed and remediated by the security team as they're identified

Infrastructure & compliance

Hosted on AWS across multiple U.S. data centers with SOC 2 Type II and FedRAMP authorizations.

  • Deployed across AWS availability zones with automated failover and infrastructure as code
  • Inherits AWS SOC 2 Type II, ISO 27001, and FedRAMP authorizations
  • Self-certified at CMMC Level 1 for Federal Contract Information safeguarding
  • Internal policy framework covering governance, access, encryption, and incident response

Network isolation & WAF architecture

Multi-tier VPC with AWS WAF and CloudFront protecting every ingress point.

  • Multi-tier Amazon VPC with only the edge tier publicly reachable
  • All ingress flows through AWS WAF, utilizing advanced protection from F5 API Security, Fortinet API Security, and Imperva IP Reputation filtering
  • Private subnets for application and database tiers with least-privilege traffic controls

API defense & rate limiting

OAuth 2.0 and OIDC authentication enforced at the edge, with IP-based rate limiting throughout.

  • Every API request requires a valid OAuth 2.0 or OIDC token
  • AWS WAF enforces rate-based rules, schema validation, and edge authentication
  • IP-based rate limiting protects against credential stuffing, scraping, and replay attacks
  • Full API usage terms at agistix.com/api-policy

Media sanitization & cloud data erasure

Controlled data deletion and key destruction across every layer of the platform.

  • Deprovisioning revokes access immediately with tenant data removed per the Data Retention Policy
  • KMS-managed key destruction renders encrypted data cryptographically inaccessible

AI agent security perimeters

Full audit logging across every AI agent interaction, with tenant-bounded data access rolling out across the agent fleet.

  • Each agent runs on Amazon Bedrock AgentCore with least-privilege IAM roles
  • Customer data never used to train foundation models
  • All requests and responses logged to CloudWatch and CloudTrail
  • Model versioning and rollback follow standard change management controls

What our customers say

“Agistix has enabled us with complete visibility to two very critical points in our supply chain: pickup and delivery. Across all modes, carriers, lanes, and products, we can easily access and share the analytics cross-functionally to drive meaningful discussion and effect change.”
Leading Biotech & Pharmaceutical Company

More to explore across the platform

Real clients, real results

Case StudyDigitizing Logistics for Government ServicesCase StudyStreamlining Cold-Chain Execution in Healthcare DiagnosticsCase StudyAutomated Rate Shopping and Tendering for Aftermarket Auto Parts

Top-tier partnerships

Keycloak
AWS IAM
Okta
Invicti
Auth0
Microsoft

See Agistix in action

Get a firsthand look at how Agistix secures and manages your supply chain data end to end.

Request a Demo

FAQs

  • What SSO providers does Agistix support?

    Agistix supports SAML 2.0 and OIDC-based SSO with Okta, Microsoft Entra ID, Keycloak, and Auth0. Multi-factor authentication is available across all provider integrations and configurable within each organization's identity provider.

  • How does Agistix handle data encryption?

    All data is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher. Encryption key management runs through AWS KMS.

  • How does Agistix manage user access and permissions?

    Agistix uses role-based permissions giving administrators granular control over what each user can view, create, or modify. Access infrastructure is backed by Keycloak, with IP whitelisting available for organizations requiring network-level controls.

  • How does Agistix secure data shared between supply chain partners and systems?

    Supply chain data moves continuously between carriers, ERPs, brokers, customs systems, and partners. Agistix secures every handoff through encrypted transmission, strict access controls, and continuous monitoring.

  • How does Agistix approach security for AI agents and automated workflows?

    Agistix AI agents operate within the same security perimeter as the broader platform, subject to the same encryption, access controls, and monitoring. All agent activity is logged and auditable, and no agentic process can access data outside its defined permission scope.

  • Is Agistix SOC 2 compliant?

    Agistix is hosted on AWS, which holds SOC 2 Type II and FedRAMP authorizations inherited as the underlying infrastructure. Agistix is self-certified at CMMC Level 1 with a System Security Plan available, and is targeting direct ISO 27001 certification by end of 2026.