Identity and access
Role-based access, least-privilege administration, multi-factor authentication for privileged access, and periodic access review.
Security & Trust
Protecting the work entrusted to us.
Security, privacy, resilience, and accountable change management are part of how Auralis designs and operates Travel Maestro.
SOC 2 Type II program in progressThis status does not represent completed certification.
Our security program
Auralis maintains documented controls across access management, software delivery, infrastructure, incident response, privacy, vendor management, backup, and disaster recovery. Evidence for customer due diligence can be made available under appropriate confidentiality arrangements.
Data protection
Encryption in transit and at rest, controlled secrets, environment separation, and documented retention and privacy processes.
Secure delivery
Version-controlled change, reviewed release processes, dependency monitoring, testing, and separation between development and production.
Monitoring and response
Central operational logging, alerting, documented incident handling, evidence preservation, and post-incident review.
Resilience
Automated backups, cross-region recovery protection, documented recovery procedures, and periodic recovery exercises.
Vendor governance
Service-provider review, access scoping, contractual safeguards, and ongoing evaluation of material subprocessors.
Hosting and data location
Travel Maestro production services are hosted in Amazon Web Services in the United States. Disaster recovery controls use a separate United States AWS region. Customer-specific contractual terms and data processing requirements govern each service relationship.
Responsible disclosure
If you believe you have identified a security issue affecting Auralis or Travel Maestro, email security@auralistechnologies.com. Please do not include sensitive customer data in the first message. We will acknowledge and coordinate an appropriate secure channel.
Trust enquiries
Customers and assessors may request security documentation, privacy information, architecture summaries, control evidence, and business continuity material through our contact page.