Security posture
How we deploy and what we claim
Griffin MFA and Griffin PAM are on-prem / Docker products. This page states the posture we can defend today — not a SOC 2 or ISO claim we have not earned.
Deployment model
- Primary model: on-premises, including Docker Compose installs
- Suitable for isolated networks; we do not market a multi-tenant SaaS control plane
- You retain the hosts, directories, and network path
Data and secrets
- Griffin MFA validates directory passwords against AD/LDAP; enrollment and OTP metadata live in Griffin
- Griffin PAM vaults privileged credentials with AES-GCM encryption
- Audit events are retained locally; SIEM export for MFA is on the roadmap
Operations honesty
- AD failover (secondary directory) is supported in Griffin MFA
- Emergency MFA bypass exists as an admin-controlled break-glass setting
- High availability for MFA is on the roadmap — not claimed as shipping today
- No ISO 27001 / SOC 2 badge is published here
Security contact
Report security issues to info@griffinsolutions.cloud. Prefer encrypted mail when sharing sensitive detail. See also /.well-known/security.txt.