Maagnetix

Maagnetix Private Limited · Enterprise Trust

Security Architecture & Policy

Maagnetix Private Limited is engineered with enterprise defense-in-depth, zero-trust access controls, multi-tenant data boundaries, and pre-bid ad fraud interception.

Entity: Maagnetix Private LimitedUpdated: October 1, 2026Official Legal Document

1. Security Philosophy & Zero-Trust Foundation

At Maagnetix Private Limited, security is an architectural foundational pillar, not a compliance afterthought. In high-frequency programmatic media buying, systems process millions of bid requests per second with real-time financial implications.

We operate under a strict Zero-Trust Architecture: every API request, service-to-service call, database query, and automated optimization agent mutation is cryptographically authenticated, authorized, and logged in an immutable audit ledger.

2. Cloud Infrastructure & Physical Security

Maagnetix systems are deployed in premier, enterprise-grade cloud data center facilities featuring:

Certifications

All underlying hosting facilities maintain ISO/IEC 27001, SOC 2 Type II, and PCI-DSS Level 1 compliance.

Redundancy

Multi-zone geographical availability clusters with automated instantaneous failover and N+1 electrical/cooling redundancy.

3. Data Encryption Standards

TLS

Encryption in Transit

All external web traffic, API transactions, and internal service communication enforce TLS 1.3 (with TLS 1.2 minimum fallback) using modern cipher suites and Perfect Forward Secrecy (PFS). Unencrypted HTTP traffic is strictly prohibited and dropped.

AES

Encryption at Rest

All databases, document stores, backups, and disk volumes are encrypted at rest using industry-standard AES-256 encryption with automated cryptographic key rotation managed via secure Hardware Security Modules (HSMs).

4. Multi-Tenant Isolation & Data Boundaries

Maagnetix is engineered with rigorous, verifiable data boundaries. Every client account operates under a distinct tenant scope:

  • Database Query Scoping: All database queries are systematically scoped by strict tenant identifiers. Direct cross-tenant data joins are impossible at the database layer.
  • Model Isolation: Algorithmic customer journey models and audience intelligence graphs are trained strictly within isolated tenant parameters. Your first-party signals are never shared or combined with another client’s account.
  • Cache Separation: Distributed in-memory caches enforce key namespacing with cryptographic tenant validation to prevent cross-account signal leakage.

5. Identity, Access Control (RBAC) & MFA

Access to the Maagnetix workspace follows the Principle of Least Privilege:

  • Granular Role-Based Access Control (RBAC): Admin, Trader, Analyst, and Auditor roles delineate sensitive budget mutations from read-only reporting.
  • Multi-Factor Authentication (MFA): Enforced for all internal staff and available for all client workspaces via TOTP and hardware security keys.
  • Single Sign-On (SSO): Enterprise accounts integrate with SAML 2.0 / OIDC identity providers (Okta, Microsoft Entra ID, Google Workspace).
  • Automated Session Governance: Inactive sessions automatically expire, and all token revocations take effect in under 2 seconds.

6. Programmatic Fraud & Brand Safety Interception

Pre-Bid Fraud Elimination

Our DSP evaluates every bid request in under 18 milliseconds against real-time Invalid Traffic (IVT) intelligence. Sophisticated bots, domain spoofing, ad injection, and click farms are filtered prior to auction bid submission, guaranteeing zero media waste.

  • Continuous validation of publisher ads.txt, app-ads.txt, and sellers.json direct lines.
  • Integrated pre-bid verification with leading brand safety registries.
  • Real-time blocklist synchronization updating hourly across global exchanges.

7. Autonomous Agent Guardrails & Immutable Audit Ledger

Autonomous optimization agents operate within non-negotiable safety guardrails:

  • Hard Daily & Monthly Caps: Programmatic agents are mechanically prohibited from exceeding client-defined budget ceilings.
  • Rate Limiting on Bidding Mutations: Automated bid adjustments are bounded by percentage maximums (e.g., max 15% shift per cycle) to prevent runaway oscillation.
  • Cryptographic Audit Ledger: Every decision, bid tweak, pacing safeguard, or human approval is cryptographically stamped and permanently recorded in an immutable ledger viewable in your dashboard.

8. Vulnerability Management & Secure SDLC

All software developed by Maagnetix undergoes continuous automated security testing:

  • Static Application Security Testing (SAST) and software dependency analysis on every code commit.
  • Dynamic Application Security Testing (DAST) executed regularly against staging and production endpoints.
  • Annual independent third-party penetration testing.
  • Zero Critical/High CVE policy enforced in production runtime environments.

9. Incident Response & 24/7 Reliability

Our Site Reliability Engineering (SRE) and Security Operations teams monitor platform telemetry 24/7/365. In the event of a verified security incident affecting customer data, Maagnetix will notify impacted account administrators without undue delay and within seventy-two (72) hours in accordance with applicable data protection laws.

10. Responsible Disclosure & Bug Bounty

We welcome collaboration with cybersecurity researchers. If you believe you have discovered a vulnerability in Maagnetix services, please report it responsibly:

Security Reporting Channel

Email: security@maagnetix.com

Please include reproducible proof-of-concept steps. We commit to acknowledging reports within 24 hours and providing remediation updates. We pledge not to pursue legal action against researchers acting in good faith and complying with safe harbor principles.

Need custom enterprise terms or a DPA?

We offer standard Data Processing Agreements (DPAs) and custom Master Services Agreements for enterprise brands and agency trading desks.

Contact Legal & Sales
Privacy & Cookies