How Does StockBalancer™ Handle Data Security?

StockBalancer™ is built with enterprise-grade security practices including AES-256 encryption, role-based access controls,and data isolation. The platform archi

Data Security in StockBalancer™

illuminis builds StockBalancer™ with security as a foundational design principle. The platform architecture is designed to support customers in meeting their compliance requirements across frameworks including GDPR and CCPA. Security documentation and data processing agreements are available to prospective and existing customers for use in internal procurement reviews, vendor risk assessments,and regulatory audit responses.

Security Architecture

StockBalancer™ is built with enterprise-grade security controls across encryption, access management, data isolation,and monitoring. The platform uses AES-256 encryption at rest and TLS 1.3 in transit, role-based access controls with full audit logging, logical data isolation between customer accounts,and continuous security monitoring. These controls are designed to align with the security principles outlined in widely adopted compliance frameworks.

Privacy and Data Protection

• Data Processing Agreements: illuminis provides a GDPR-compliant Data Processing Agreement (DPA) for all customers whose operations involve EU data subjects, covering lawful basis for processing, data subject rights, sub-processor disclosures,and breach notification obligations
• Data residency options: Enterprise accounts can request EU data residency to ensure that inventory data associated with EU operations is processed and stored within the European Economic Area
• CCPA support: For California-based businesses and those serving California consumers, StockBalancer™ is designed to support CCPA rights including data access requests, deletion requests,and opt-out of data sale, implemented through the platform's built-in data subject request workflow
• Sub-processor transparency: illuminis maintains a current list of sub-processors involved in StockBalancer™ data handling, updated with 30 days advance notice of any new additions

Public entity clients requiring additional security documentation, state-specific data security requirements, or accessibility standards (Section 508, WCAG 2.2 AA) should contact the illuminis team directly. Security documentation is typically delivered within 3 business days of a formal request.