Trust & Security

Enterprises trust Infinite with the applications that run their business. Security and privacy are built into how we operate and how our products are designed.

Our approach

We apply security by design and defense in depth: least-privilege access, encrypted data, isolated customer environments, and continuous monitoring across our products and operations.

Certifications & compliance

We align our practices with leading industry frameworks. Confirm and update these statuses with your security team before publishing: SOC 2 Type II [status/date], ISO/IEC 27001 [status/date]. Our products support customer compliance with GDPR and Brazil's LGPD, including in-country data residency.

Data protection

Data is encrypted in transit (TLS) and at rest. Secrets and keys are held in managed key/secret stores. The DB2/400 to MySQL conversion preserves data integrity end to end.

Data residency

Migrated estates can be deployed in the AWS, Azure, or Google Cloud region of your choice, including in-country regions to meet data-residency obligations such as LGPD.

Tenant isolation

Each customer's data and access are scoped to their own organization. Our customer support assistant enforces per-account isolation on every request.

Access control & monitoring

Staff access requires SSO and MFA and is granted on a least-privilege basis. Administrative and data-access actions are logged for audit.

Vulnerability management

We patch and update on a regular cadence and perform [internal testing / third-party penetration testing — confirm cadence]. Report a suspected vulnerability to security@infinitecorporation.com.

Sub-processors

We maintain a current list of sub-processors used to deliver our services. [Link to or attach your sub-processor list.]

Request our security package

Need our SOC report, completed security questionnaire (SIG/CAIQ), or a DPA? Email security@infinitecorporation.com or contact us.

Last updated: [DATE]