Security posture

Maqaas maintains a written security posture document covering how pilot traffic is handled, what is and is not retained, authentication and key lifecycle, logging, and the limitations of a pilot deployment.

It is provided to pilot and design partners on request rather than published here, because it is written for a specific evaluation and is shared under NDA alongside the pilot agreement.

To request it, email support@maqaas.com. It is normally shared during a security review, together with the SOC 2 readiness account.

Maqaas is not currently SOC 2 certified, and holds no ISO 27001 certification or completed penetration test. Nothing in the documentation should be read as a compliance claim.

The data-handling behaviour the API actually implements is described in the API reference and the integration guide.