Trust & Security
Avrea runs every CI job in a fully secure environment. Your source code, secrets and build artifacts stay in your control.
Enterprise-grade security
Avrea is built to keep everything safe and secure.
ISO 27001
Avrea's information security management system is certified to ISO/IEC 27001, the international standard for systematic security controls.
GDPR
Avrea complies with GDPR requirements through strong data protection, access controls, logging, and retention practices.
Built with security at the core
MFA & SSO
Secure authentication with multi-factor authentication and single sign-on. Integrate with your identity provider to enforce strong access policies across your team.
Data Encryption
All customer data is encrypted at rest with AES-256 and in transit via TLS. Sensitive information like access tokens and keys is encrypted at the application level before being stored in the database.
Data Hosting
We run on reputable cloud providers in multiple regions, including the EU and US. You choose where your data lives, and we don’t move it across regions without your consent.
Role-based Access Control
Control who can access runners, logs, and build data. Fine-grained permissions ensure teams can collaborate safely while limiting access to sensitive environments.
Audit Logs
Every action in Avrea is recorded in detailed audit logs. Track changes to pipelines, access permissions, and system configuration for full traceability.
Network Isolation
Build jobs run in isolated environments to prevent cross-project access. Each execution environment is ephemeral and destroyed after the job completes.
Trusted by:
