Security Overview
Praevis Exchange is built for enterprise-grade programmatic advertising. Security is addressed at every layer: infrastructure, data, auction integrity, and fraud prevention.
Security at a glance
| Area | Measure |
|---|---|
| In transit | TLS 1.3 (TLS 1.2 minimum) on all endpoints |
| DDoS protection | Cloudflare Enterprise — 100+ Tbps mitigation capacity |
| Data sovereignty | EU data in FRA, US in NYC, UK in LON — no cross-region leakage |
| IVT detection | Defender — 5-layer, <0.5ms overhead, <2% platform fraud rate |
| Uptime | 99.5–99.9% SLA depending on agreement |
| Audit log retention | 90 days auction logs, all events |
| Access control | Role-based, MFA for admin accounts |
| Incident response | P1 <15 min, P2 <1 hour |
Key contacts
| Contact | Purpose |
|---|---|
| [email protected] | Security vulnerability reports, security review requests |
| [email protected] | Data protection / GDPR questions |
| [email protected] | Policy violations, fraud reports |
| [email protected] | Operational security incidents |
Vulnerability disclosure
Praevis operates a responsible disclosure programme. If you discover a security vulnerability:
- Email [email protected] with details
- Do not disclose publicly until we’ve had 90 days to investigate and patch
- We respond within 5 business days
We do not offer a bug bounty programme at this stage.
Enterprise security reviews
For enterprise procurement teams requiring a formal security review:
- Questionnaire responses (SIG Lite, CAIQ, or custom): email [email protected]
- Architecture documentation: available under NDA
- Penetration test reports: executive summary available under NDA (full report on request for enterprise deals)
We aim to respond to security review requests within 10 business days.
Further reading
- → Infrastructure Security — multi-region, TLS, DDoS, private networking
- → Fraud Methodology — Defender IVT detection layers and standards
- → SLA & Uptime — uptime commitment, incident response, maintenance windows
- → Audit Logging — what’s logged, retention, access