Security Compliance

How MonitorX secures your telemetry streams, server infrastructure, and user identities.

1. Tenant Data Isolation

MonitorX uses a secure multi-tenant design pattern. Every tenant operates in a logically isolated partition within the database. Downstream API keys and access metrics are validated at the gateway level, guaranteeing that data from one tenant can never be read or queried by another.

2. Encryption Standards

• In-Transit: All communication between the MonitorX agents, the frontend web portal, and the backend ingestion servers is encrypted using industry-standard TLS 1.3 encryption.
• At-Rest: Database storage and historical logs are encrypted at rest using AES-256 encryption via managed Azure SQL Server services.

3. Two-Factor Authentication (2FA)

To secure access to your telemetry console and subscription management, MonitorX enforces Time-Based One-Time Password (TOTP) two-factor authentication. 2FA is required for sign-in, tenant registration, white-label branding, and all payment gateway checkouts.

4. Secure Agent Communications

The MonitorX lightweight Linux/Windows agent connects securely via an outbound-only connection. The agent does not open listening ports on your hosts, eliminating exposure to external port scans or network attacks.

5. Auditing & Compliance

MonitorX tracks administrative activity logs across the tenant profile. Security events, invoice modifications, and configuration changes are recorded in immutable logs for security compliance audits.