Security & Trust

Cloud Infrastructure

WonForge operations are hosted entirely on Amazon Web Services (AWS). While WonForge manages the application layer, we leverage AWS’s industry-leading physical and network infrastructure, which is certified for SOC 2, ISO 27001, and other global compliance standards.

Data Encryption

All client data is encrypted to strict enterprise standards:

• At Rest: All live production databases and S3 storage buckets utilize AES-256 encryption by default.
• In Transit: All web traffic, API endpoints, and data transfers are secured via HTTPS utilizing TLS 1.2 or higher.

Production-Grade Data Isolation

We never co-mingle enterprise datasets. From the first day of a pilot through full-scale live production, your data remains strictly siloed in its own dedicated AWS S3 bucket. We ensure that your proprietary formulations, blend ratios, and operational data are completely isolated.

Furthermore, our optimization models and production databases operate within a Virtual Private Cloud (VPC), rendering them inaccessible from the public internet. Administrative access is strictly limited, continuously monitored, and protected by Multi-Factor Authentication (MFA).

Confidentiality & NDA Readiness

We operate under strict Non-Disclosure Agreements (NDAs) before any production data is exchanged. We understand that proprietary formulations, blend ratios, and operational data are among your most valuable assets, and ensure legal protections are fully established before any data is exchanged.

Data Retention & Deletion

You retain full ownership of your data. Upon the conclusion of a pilot program, or upon termination of a live production contract, WonForge guarantees the secure deletion of all proprietary data, including schedules, constraint matrices, and custom optimization models, from our active servers and backups in accordance with standard enterprise data destruction protocols.