Security

Acronym IQ follows practical cloud security controls focused on encryption, access boundaries, and infrastructure traceability.

Data protection

  • Data in transit uses HTTPS/TLS for public application access.
  • The app does not store your sensitive information or long-lived credentials.
  • Sensitive runtime values remain in your AWS account, managed through Secrets Manager or SSM Parameter Store.
  • Application infrastructure runs inside your AWS account resources.

Access control

  • AWS IAM role-based access is used for deployment operations with least-privilege IAM policies.
  • Execution-role permissions are scoped for runtime startup needs.
  • Administrative actions are auditable through AWS and application logs.

Shared responsibility

Acronym IQ provides secure defaults and workflow guardrails. You remain responsible for your AWS account policies, domain registrar settings, and secret lifecycle management.