What Axia Security does
Axia Security is a data-security platform that watches the channels where your people work, such as email, chat, collaboration tools and AI coding agents. It detects when sensitive or confidential information is shared in a risky way, explains why it matters, and helps your team respond.
Axia combines your existing DLP signals with its own AI analysis. The aim is fewer false alerts and clearer, actionable cases for the people who handle them.
Main capabilities
| Capability | What it gives you |
|---|---|
| Connect | Connect email, chat, DLP, ticketing and AI coding tools with guided setup. |
| Detect & analyse | Events are enriched and classified. AI analysis decides whether sensitive data was exposed, how severe it is, and why. |
| Cases | Findings become cases with severity, status, owner, timeline and recommendations. Teams investigate and close them with a documented reason. |
| Command & Insights | A risk command centre, plus posture and operations metrics: alerts vs. true cases, time to resolve, top case types and departments. |
| Intel | A conversational AI advisor for asking questions about cases and risk in plain language. |
| Act & Enforce | Choose which response actions Axia may take (for example coaching the user, holding a message or revoking a share link). Express your policies in plain language. |
| Ticketing | Create and track tickets for cases in Jira or Azure DevOps. |
Some capabilities are switched on per workspace. If you don't see a page described here, ask your Axia contact.
How data flows
- Ingest. Connected sources send events to Axia, using the access your administrator approved during setup. Examples: a Microsoft Purview DLP alert, an email, an AI coding agent prompt.
- Enrich & classify. Axia extracts the relevant content and context, for example organization relations and guidance documents you uploaded.
- Analyse. AI models assess whether sensitive information was exposed and how severe it is. Models are accessed through Amazon Bedrock.
- Case. Relevant findings become cases in the Axia web application.
- Respond. Your team investigates, assigns, opens tickets and takes the response actions your administrator allowed.
System boundaries
Deployment models
| Model | Where it runs |
|---|---|
| Self-hosted / dedicated | In a dedicated AWS account (customer-owned, or Axia-managed for one customer), deployed with Terraform. See the Deployment guide. |
| Axia-hosted | In Axia's AWS environment, managed by Axia. |
In scope of the Axia platform
- The Axia web application and API, including sign-in, roles, cases, Intel, Act, Enforce, Connect, Users and Settings.
- The processing services that ingest, enrich, classify and analyse events.
- Axia's own databases, object storage and queues in the deployment's AWS account and region.
Outside the Axia platform
- Your source systems: Microsoft 365, Google Workspace, DLP tools, AI coding agents. Your identity provider (Microsoft Entra ID or Google Workspace), and your ticketing systems.
- Users' devices and browsers.
- For self-hosted deployments: the customer's AWS account, networking and account-level controls.
Shared responsibilities
| Area | Axia Security | Your organization |
|---|---|---|
| Application security | Secure development, vulnerability management, penetration testing, fixes and updates | Keeping your deployment updated to supported versions (self-hosted) |
| Access | Roles, encrypted sessions, single sign-on support, hashed password storage | Deciding who gets access and which role; removing leavers; enforcing MFA in your identity provider |
| Integrations | Requesting only the permissions each connector needs; protecting stored connector credentials | Approving consents in your tenant; rotating or revoking credentials you issued |
| Data | Encryption in transit (TLS) and at rest; processing only for the service | Choosing which sources to connect; data-retention decisions for your environment |
| Infrastructure | Axia-hosted: operations, monitoring, backups | Self-hosted: the AWS account, network, backups and account-level security |