Security here at ItemTraxx Co

Current security practices and operational controls.

ItemTraxx documents the security practices and operational controls that are in place today. The public security page is factual guidance for customers, administrators, procurement reviewers, and researchers; it is not a statement about private controls that are deliberately not published.

The application uses protected sign-in flows, role- and workspace-aware authorization, server-side validation, request controls at the edge, trusted service boundaries, audit history, and monitoring around important operational paths. These layers work together; a page description is not a substitute for authorization or tenant isolation.

Security issues should be reported through the published security issue page or security contact. A useful report identifies the affected page or endpoint, expected and observed behavior, impact, and safe reproduction steps. Do not access another customer, attempt destructive actions, or include real secrets in a report.