SECURITY & TRUST

Building customer trust at scale

Xyte’s platform is built to the highest enterprise-grade security and privacy standards, so you can confidently build digital trust with your partners and customers.

Trusted by leading organizations | Used by hundreds of enterprises | Millions of devices managed
Schneider Electric
Bluesound Professional
Avpro logo

SECURITY

Xyte is committed to keeping our customers’ data secure. We constantly implement the strictest security measures to ensure your data is kept safe.

Xyte’s security model and controls are based on international standards and industry best practices. Our systems are hosted on Amazon Web Services (AWS), ensuring that your data is available whenever you need it. AWS employs leading physical and environmental security measures, resulting in highly resilient infrastructure. Learn more about AWS’ security practices.

RESILIENCY

We keep our systems rigorously up to date, blocking any attempts to take advantage of known vulnerabilities, and running penetration tests on a regular basis.

DATA ENCRYPTION

Xyte encrypts all data both in flight and at rest so no unauthorized third party can gain access to your or your customers’ data.

DATA AVAILABILITY & INTEGRITY

Xyte runs in multiple zones, providing continuous service with minimal downtime. All data is continuously backed up to allow fast and full recovery in case of erasure or alteration. Xyte’s SLA policy is available upon request.

PRIVACY

Xyte is committed to protecting the privacy of your data and that of your customers, enabling you to choose where your primary data is located and guarding it against unauthorized access with industry best practices.

Xyte recognizes the importance of personal data and of respecting the privacy rights of individuals, as well as the needs of our customers in being compliant with the GDPR and other national data protection laws. Xyte implements these legal frameworks into all our products and operations, and is additionally bound by the provisions of Israel’s Privacy Protection (Data Security) Regulations.

GDPR & DPA

Xyte supports its customers in achieving compliance with the General Data Protection Regulation (GDPR), including a data processing agreement (DPA) to comply with article 28 of the GDPR.

PRIVACY BY DESIGN

We follow Privacy by Design principles that govern the treatment of data exposed to Xyte. These are applied worldwide and reflected across the company in development plans, business plans, and day-to-day operations.

SUBPROCESSORS

Xyte uses only service providers that guarantee a high level of data protection and security and signs data processing agreements with all providers that process data on our behalf. A list of all subprocessors authorized to process data for Xyte is available at:
https://dev.xyte.io/docs/data-subprocessors.

COMPLIANCE & CERTIFICATION

Xyte obtains industry-accepted certifications, complies with all current industry regulations, and works only with trusted partners so you can be confident that your company and customer data is secure and compliant. Xyte has completed a SOC 2 Type 2 audit for the period of 2023–2024. The full report is available upon request.

Xyte has completed a GDPR compliance assessment and is GDPR compliant.

logo company

Xyte was a go-to for sure. It was clear from day one, from the experience the Xyte team has, that we needed to go with this solution to build our product FUSE.

Dana Corey
SVP & GM Global Sales
Avocor

See Xyte in Action