Security & Encryption
Security is not an afterthought at Oakden. It is built into every layer of the platform, from data storage to AI processing to network communication.
Encryption
All data is protected with 256-bit AES encryption, the same standard used by banks and government agencies:
- At rest — Data stored on disk is encrypted. Even if someone gains physical access to the storage device, they cannot read the data without the encryption keys.
- In transit — All network communication uses TLS 1.3 encryption. Data moving between your browser and Oakden servers is protected from interception.
- End-to-end for sensitive data — Certain categories of data (financial records, personal information, authentication credentials) receive additional encryption layers.
Zero-Trust Architecture
Oakden follows a zero-trust security model. This means:
- No user, device, or service is trusted by default, even inside the network
- Every request is authenticated and authorized independently
- Access is granted on a least-privilege basis
- All actions are logged for audit purposes
Authentication
User authentication uses JWT tokens stored in HTTP-only cookies. This prevents common attacks like XSS token theft. Passwords are hashed using industry-standard algorithms and never stored in plain text.
Session management includes:
- Automatic session expiration
- Secure cookie flags (HttpOnly, Secure, SameSite)
- CSRF protection on all state-changing operations
Data Privacy
- No data selling — Oakden never sells, shares, or monetizes user data
- No third-party tracking — We do not embed advertising trackers or analytics that report to third parties
- Data minimization — We collect only the data necessary to provide the service
- User control — You can export or delete your data at any time
Canadian Privacy Compliance
Oakden is a Canadian company and complies with:
- PIPEDA (Personal Information Protection and Electronic Documents Act) — Canada's federal privacy law for private-sector organizations
- CASL (Canada's Anti-Spam Legislation) — Governing electronic communications and consent
Audit Trails
Every AI action, data access, and system event is logged. These audit trails are:
- Tamper-evident (append-only logging)
- Timestamped with precision
- Associated with the user or system that initiated the action
- Retained according to your data retention policy
Gateway Security Layer
The Oakden Gateway acts as a security perimeter for all AI operations. It validates requests, sanitizes inputs, enforces rate limits, and monitors for anomalous patterns before any AI model processes your data.
Reporting Security Issues
If you discover a security vulnerability, please report it responsibly to [email protected]. We take all reports seriously and will respond within 24 hours.