Security, Audit Integrity & Trust

GradeX records processing events for each device, including applicable device identifiers, dock/desk, user, timestamp and event sequence. These records support traceability from intake through diagnostics, grading, erasure and downstream disposition.

Diagnostic reports and erasure certificates can include QR-linked validation. Customers can configure whether a record is available through a public validation URL, allowing approved external parties to confirm the corresponding GradeX record when public access is enabled.

Role-based access ensures only authorized users can view or export sensitive data.

Administrators can define granular permissions for each user role, controlling access to device data, reports, and system configurations. All access attempts are logged for compliance purposes.

GradeX supports Windows and macOS Dock clients; communications to central servers are encrypted in transit and at rest. Servers are protected by modern security practices

Our infrastructure employs industry-standard encryption (TLS 1.3), regular security audits, and automated vulnerability scanning. All data is stored in SOC 2 compliant data centers with redundant backups.

When manual intervention occurs, every step, comment, and decision is logged and tied to technician identity and timestamp.

This ensures that even edge cases and exceptions maintain the same level of audit trail integrity as automated workflows. No action goes unrecorded.

GradeX has completed the ADISA Product Claims Test process for its approved erasure product scope. The broader platform is designed around audit readiness, controlled data handling, role-based access and traceability, with customer-specific retention and regulatory requirements handled through configuration and implementation practices.