Trust and security.

What Arcrix™ by QTrino Labs reads, what it never touches, and what your security review gets in writing.

Collector, inside your networkOnly metadata leaves, to Arcrix™

It reads how your data is protected, never the data itself.

Arcrix™ works from the configuration and metadata in the environments you connect, plus the application context you give it.

What Arcrix™ reads

  • Which certificates, keys and algorithms are in use
  • Where each one is used
  • The applications and owners you tell it about

What it never touches

  • Your private or secret keys
  • Card numbers, or the data you protect
  • Tests that probe or attack your systems
  • Software installed on each of your machines

Everything stays in your control.

  • Read-only.

    Arcrix™ changes nothing in your systems.

  • Your network.

    The collector runs inside it, connected only where you choose.

  • Your teams.

    They make every change, in the tools they already use.

  • Your choice.

    Run it as a shared cloud service or a dedicated deployment, hosted in the region you choose.

Results you can stand behind.

Arcrix™ shows what was checked, what wasn’t and why. Any past result can be reproduced from the evidence behind it.

Illustrative: the same evidence gives the same result, and the gap is declared both times.

Your security review, answered in writing.

Security reviewers get our answers in writing before a pilot.

Request them
  • Security review pack

    How data is kept and protected, where Arcrix™ runs, and how to scope what it reads.

  • Procurement documents

    The current subprocessor list and our data processing terms.