Shared responsibility model

Clear boundaries help procurement, security, and operations evaluate fit before contract signature—what EVYNUM operates versus what customers configure in their tenants.

In brief

EVYNUM operates platform software and its internal server network. Customers manage identity, configuration, and data placed in Industry Solutions.

Why boundaries matter

Regulated buyers need scope clarity—not assumptions that one party owns every control.

Use this page with Security, Infrastructure, and Compliance when legal or vendor management reviews EVYNUM.

What EVYNUM owns

Platform security, internal infrastructure, and documentation for procurement reviewers.

Platform controls

Encryption defaults, hardened infrastructure, secure development discipline, and incident response for EVYNUM-operated services.

Documentation

Published evidence on Trust, product pages, and EVYNUM Docs for operational memory referenced in audits.

Not public hosting

EVYNUM does not sell VPS, dedicated servers, or colocation—see Infrastructure scope.

What customers own

Identity, configuration, and data classification inside Industry Solutions.

  • Identity & accessUser provisioning, role design, and access policies for end users in your tenant
  • ConfigurationProduct settings aligned to your policies and regulated workflows
  • DataContent, classification, and retention choices for data you place in Industry Solutions
  • TrainingOperator and user training for regulated workflows on your side of the boundary

Partners

Commercial programs governed separately from product security scope.

Commission and referral programs run through Gateway partner portal. Partners do not receive elevated access to customer production data through referral workflows.

Vulnerability disclosure

Report suspected issues with enough detail to assess impact.

Email support@evynum.com. Full process on Security → Vulnerability disclosure.

Procurement

Request security documentation

Share your questionnaire, products in scope, and deadline. EVYNUM routes security documentation through a dedicated intake—not a generic contact form.

  • Vendor security questionnaires (SIG, CAIQ, custom templates)
  • Control summaries for Industry Solutions under evaluation
  • Shared responsibility and infrastructure scope for legal review

Evaluate EVYNUM in depth

Platform architecture, build philosophy, and trust evidence—three hubs you can review independently before you commit.