Trust Center
The API7 Trust Center is your centralized resource for all security and compliance-related information, including certifications, security reports, and best practice guides.
The API7 Trust Center is a centralized resource for all security and compliance-related information about API7 Gateway. Use it to evaluate API7.ai's security posture and to meet your own regulatory requirements.
Certifications and reports
API7.ai maintains a formal security program and can provide current certification status, audit reports, and compliance documentation on request. To obtain copies of the latest reports or to request an attestation for your procurement process, contact your API7 account manager or sales@api7.ai.
Security best practice guides
The guides below cover configuring API7 Gateway for maximum security:
- Security Hardening — recommended settings for production environments.
- Role-Based Access Control — design least-privilege roles and permission boundaries.
- Secure Credentials — use external secret managers to protect sensitive configuration data.
- Verify Image Signatures — verify that container images were built and signed by API7.ai.
Security contact
If you have questions about API7.ai's security practices or need to report a security concern, contact the security team directly at security@api7.ai. Your API7 support representative can also connect you with the right team for specific security advisories or compliance documentation.
Data privacy and governance
For information about how API7.ai protects customer data, its adherence to global privacy regulations (such as GDPR), or to request a Data Processing Agreement (DPA), contact your API7 account manager or sales@api7.ai.
Next steps
- Review the Vulnerability Scanning practices.
- Analyze Audit Logs for your own environment.