Carrier-Grade Information Security
Security & Vulnerability Disclosure
Traject Technologies, Inc. • NIST SP 800-63B • ISO 9001:2015
1. Security Architecture & Baseline
Traject Technologies designs all systems to meet rigorous carrier-grade operational requirements:
- Authentication: NIST SP 800-63B AAL2/AAL3 hardware security key (FIDO2/WebAuthn) and TOTP enforcement.
- Isolation: Multi-tenant database partitioning via PostgreSQL Row-Level Security (RLS) policies.
- Encryption: TLS 1.3 in transit with HSTS and AES-256 encryption at rest across storage clusters.
2. Responsible Vulnerability Disclosure Program
We welcome security researchers to inspect our public endpoints. If you discover a potential vulnerability, please report it responsibly:
Report Destination: security@trajecttech.com
PGP / Encrypted Transmission: Available upon request
Response SLA: Initial acknowledgement within 24 business hours