Compliance
Averisys Analytics makes compliance statements by exact scope. The team ties every claim to the Azure services, regions, and controls that apply to the customer's deployment. Microsoft publishes Azure compliance documentation and audit artifacts through the Service Trust Portal. Microsoft also states that audit reports identify the services that are in scope for each program.
The firm does not claim that Azure alone makes Averisys Analytics compliant. Microsoft states that Azure Policy maps controls by Microsoft, the customer, and shared responsibility. Microsoft also states that customers remain responsible for their own implementation and assessment, even when Azure has certifications or attestations. Azure publishes ISO and SOC materials through the Service Trust Portal, and Microsoft offers a HIPAA BAA for in-scope Azure services.
How Averisys Analytics applies this in practice
Averisys Analytics treats customer data as material held in trust. Access follows the least privilege principle: staff and services receive only the access a specific task requires, and that access is reviewed and removed when the task ends. Data is encrypted in transit and at rest, administrative activity is logged, and separate environments keep testing work away from production records. Where analysis can be performed on aggregated or de-identified data, that is the default rather than the exception.
Practices are documented so a customer's own security, privacy, or procurement reviewer can verify them instead of taking a claim at face value. Averisys Analytics answers security questionnaires, explains how data flows through the platform, and states plainly what it does and does not do with customer information. Subprocessors are limited to those needed to operate the service, and each is selected against the same expectations applied internally.
Policies change as the platform changes. When a new capability handles data differently, documentation is updated alongside it, and customers with an active agreement are notified of material changes. Questions about a specific requirement, contract term, or regional obligation can be sent to support@averisysanalytics.com.