Built for trust. Clear, verifiable protection for every part of your work.

See how Figena protects your data, governs access and AI, and keeps important activity reviewable. Work with clarity and confidence.

Two colleagues discussing work across a table in a bright office

Trust signals Visible. Understandable. Verifiable.

Recognized signals help show the commitments behind Figena, from cloud security and responsible AI to accessibility, open source practices, and sustainable hosting.

Security foundations Built into every step.

Protection is not a separate setting. Figena brings encryption, access boundaries, resilience, and review trails into the workflows teams use every day.

Encrypted by default

Data moves over TLS, and sensitive information is handled with minimum exposure.

Clear access boundaries

Critical actions stay within workspace, role, and auditable authorization boundaries.

Resilient infrastructure

Hosting, backups, redundancy, and monitoring help reduce single points of failure.

Reviewable records

Important changes, files, approvals, and AI actions keep clear traces.

Enterprise controls Controls teams can count on.

Identity, sessions, approvals, audit trails, and key-related controls work in one governance model, so security requirements fit naturally into daily operations.

Single Sign-On (SSO) with OpenID Connect (OIDC)

Multi-factor authentication (MFA)

Role-based access control (RBAC)

Audit logging for all actions

IP allowlisting

Session management and timeout

API key rotation

Webhook signature verification

Responsible disclosure A clear way to report security issues.

If you find a security issue affecting Figena, Cilila AI, or related public assets, send reproduction details through the dedicated channel. We will acknowledge it, follow up, and keep communication open during remediation.

Our commitments

Acknowledge reports promptly

Keep reporters informed during remediation

Coordinate reasonable disclosure timing

What we ask

Enough context and steps to reproduce the issue

No disruption to other customer data or service stability

Reasonable time before public disclosure