Security
Audit evidence you can defend, on infrastructure you can trust.
Franchise audit data is operationally sensitive. We protect it with certified controls, strict isolation and evidence nobody can quietly edit.
Certifications
- SOC 2 Type II report (security, availability, confidentiality), renewed annually
- Annual third-party penetration test with summary letter on request
- ISO 27001-aligned information security management system
Encryption
- AES-256 at rest with per-tenant keys in AWS KMS
- TLS 1.3 in transit; HSTS on every domain
- Device storage encrypted on iOS and Android
Isolation
- Logical tenant isolation enforced at the database row level
- Proprietary brand standards and scores never cross franchise systems
- Per-system Vision AI models; no cross-customer training
Access
- Role-based access: corporate, FBC, multi-unit owner, store GM
- SSO via SAML 2.0 and SCIM provisioning on Enterprise
- MFA enforced for administrators; session timeouts configurable
Evidence integrity
- SHA-256 hash recorded at capture for every photo
- GPS geofence and timestamp verification on sync
- Immutable audit log of every view, edit and export
Operations
- Hosting in AWS us-east-1 and ap-south-1, chosen per system
- Encrypted backups every 6 hours, tested monthly
- 99.9% uptime target, live status page
Security questions
Yes, under NDA. Request it from security@gaziwellness.si or through your account team.
In the AWS region you choose at onboarding: United States (us-east-1) or India (ap-south-1). Photos and audit data stay in that region.
No. Vision AI models run inside Gazi Wellness infrastructure. Photos are not shared with external AI providers.
Email security@gaziwellness.si. Our security.txt lists the policy and expected response times.
Double your FBC field audit capacity while eliminating subjective disputes.
Upload 15 store walk photos. See Gazi Wellness score them against brand standards in 60 seconds.
14-Day Free Production Trial on up to 10 stores. Unlimited FBC seats.