Aevum Zenth

⚡

API & Developer Integration

All Aevum Zenth API endpoints require Bearer token authentication via the Authorization header. Tokens are issued through our OAuth 2.0 Authorization Server.

Example header:
Authorization: Bearer eyJhbGciOiJSUzI1NiIs...

Rate limits vary by subscription tier and endpoint criticality:

Public/Sandbox: 100 requests/minute, 1,000/hour
Enterprise: 5,000 requests/minute with auto-scaling buckets
Real-time streams: Dedicated WebSocket channels with configurable throughput

Headers X-RateLimit-Limit and X-RateLimit-Remaining are returned with every response.

Yes. Webhooks are configured via the Developer Console under Integrations > Event Subscriptions. We support retry policies with exponential backoff, signature verification via X-Aevum-Signature, and idempotency keys for safe processing.

🔒

Security & Compliance

In Transit: TLS 1.3 with ECDHE key exchange and AES-256-GCM cipher suites. Certificate pinning is supported for mobile and embedded clients.

At Rest: AES-256 encryption with customer-managed keys (CMK) via AWS KMS / Azure Key Vault. Field-level encryption is available for PII and financial data.

Yes. We maintain SOC 2 Type II, ISO 27001, GDPR, CCPA, and HIPAA (for Health Sciences division) compliance. Audit reports are available under NDA through our Trust Center portal.

We conduct quarterly third-party penetration tests and maintain a bug bounty program via bugbounty.aevumzenth.com. Responsible disclosure is encouraged; critical vulnerabilities are patched within 24–48 hours.

🌐

Infrastructure & Uptime

Standard SLA: 99.95% uptime monthly. Enterprise contracts include 99.99% guarantees with financial credits for downtime exceeding thresholds. Status page: status.aevumzenth.com

Core services are deployed across 6 global regions with active-active failover. Database replication uses asynchronous multi-region writes with conflict resolution. CDN edge nodes cache static and API responses with configurable TTLs.

Yes. The Aevum Zenth Private Cloud edition supports deployment within customer AWS/Azure/GCP VPCs via private endpoints. VPC peering and dedicated transit gateways are provisioned on request for regulated industries.

🔑

Authentication & Access Control

We support SAML 2.0 and OIDC for enterprise SSO. SCIM provisioning is available for automated user lifecycle management. MFA (TOTP, WebAuthn, FIDO2) is enforced for administrative roles.

RBAC follows a hierarchical model: Viewer → Editor → Admin → SuperAdmin. Custom roles can be defined with granular API scopes. Resource-level policies support ABAC (Attribute-Based Access Control) for dynamic environments.

🛠️

Support & Incident Response

SEV1 (Critical): System down/data breach → 15 min response, 2-hour resolution target
SEV2 (High): Major feature degraded → 1-hour response, 8-hour resolution
SEV3 (Medium): Minor issue/workaround available → 4-hour response
SEV4 (Low): Feature request/docs → Next business day

Use the Developer Portal (developers.aevumzenth.com) or email tech-support@aevumzenth.com. Include API keys, request IDs, and logs. Enterprise clients have dedicated Slack channels and 24/7 phone support.

📊

Data Formats & Interoperability

REST endpoints accept/return JSON and XML. GraphQL is available for complex querying. Binary payloads (Protobuf, Avro) are supported for high-throughput telemetry and IoT streams.