Trust & Security

Enterprises trust Infinite with the applications that run their business. Security and privacy are built into how we operate and how our products are designed.

Our approach

We apply security by design and defense in depth: least-privilege access, encrypted data, isolated customer environments, and continuous monitoring across our products and operations.

Compliance & frameworks

We align our security program with leading industry frameworks and best practices. Our products support customer compliance with GDPR and Brazil's LGPD, including in-country data residency.

Data protection

Data is encrypted in transit (TLS) and at rest. Secrets and keys are held in managed key/secret stores. The DB2/400 to MySQL conversion preserves data integrity end to end.

Data residency

Migrated estates can be deployed in the AWS, Azure, or Google Cloud region of your choice, including in-country regions to meet data-residency obligations such as LGPD.

Tenant isolation

Each customer's data and access are scoped to their own organization. Our customer support assistant enforces per-account isolation on every request.

Access control & monitoring

Staff access requires SSO and MFA and is granted on a least-privilege basis. Administrative and data-access actions are logged for audit.

Vulnerability management

We patch and update on a regular cadence and perform both internal security testing and independent third-party penetration testing. Report a suspected vulnerability to security@infinitecorporation.com.

Request our security package

Need a completed security questionnaire (SIG/CAIQ) or a DPA? Email security@infinitecorporation.com or contact us.

Last updated: July 2026