Overview
OMB has been operating since 2012. Protecting our customers' information is a design condition of AES, not a layer added at the end. This page summarizes how we protect it; the detail lives in the sections of this center.
Infrastructure
AES runs on world-class infrastructure: 18 data centers on four continents, SOC 2 Type II and SOC 3 certified, with ISO 27001 data centers.
Encryption
All communication with omb.cloud is encrypted with TLS 1.3 and HSTS. The credentials and keys you entrust to us are stored encrypted with AES-256-GCM, and backups are encrypted with a dedicated key.
Access
Passwords are stored only as an irreversible hash. Each person has a role with the permissions their job requires, and accounts can use two-step verification and passkeys.
Per-customer isolation
Each business operates within its own data perimeter: every read and every write is limited to its account. When authorized OMB staff act in supervision mode, the platform records the real identity of who is acting.
Backups
Daily database backups, verified before being stored and encrypted, with a maximum rotation of 14 days.
Your information is yours
You can download your information at any time, and deletion is done on request. We never sell customer data.
Compliance
AES is designed to operate in line with GDPR (EU), LGPD (Brazil) and CFDI 4.0 (Mexico).
Incidents
Immediate containment and notification within 72 hours of confirmation. The detail is in Incident response.
More in this center
- Platform security
- Vault Mode
- Digital contracts
- AI and your data
- Threats and the state of the art
- Incident response
Report a vulnerability
If you find a vulnerability, write to security@omb.cloud. We handle every report with priority and credit the reporter, unless they prefer anonymity.