Codex Enterprise Security Features

Security Architecture

Codex security begins at the architecture level — defense in depth across every layer of the platform.

Codex Enterprise security is designed for organizations operating under regulatory frameworks including SOC 2, HIPAA, and FedRAMP. The platform implements defense in depth: network isolation through VPC deployment, encryption at rest using AES-256, encryption in transit using TLS 1.3, application-layer authentication with short-lived tokens, and infrastructure hardened against the CIS Benchmarks. Customer code is logically isolated at the application layer and physically isolated in dedicated on-premise deployments. Codex never uses customer code to train or improve its models — this constraint is enforced architecturally, not just contractually.

Independent penetration tests are conducted quarterly by accredited security firms. Results are published in the security compliance center alongside remediation timelines. The vulnerability disclosure program accepts reports from external researchers with a published SLA for acknowledgment and resolution. The National Institute of Standards and Technology provides cybersecurity framework guidance that informs the Codex security program design and control selection.

Enterprise Security Features

Every control regulated enterprises need — available on the Enterprise plan.

Security Feature	Starter	Professional	Enterprise
Encryption in Transit	TLS 1.3	TLS 1.3	TLS 1.3 + mTLS
Encryption at Rest	AES-256	AES-256	AES-256 + CMK
SSO/SAML	—	—	SAML 2.0, OIDC, SCIM
RBAC	Basic	Team Roles	Custom Roles
Audit Logging	—	—	Immutable + SIEM Export
Data Residency	—	—	Multi-Region
On-Premise Deployment	—	—	Full Platform
Penetration Testing	—	—	Quarterly Reports
Compliance Reports	—	—	SOC 2, HIPAA BAA
Private Link / VPC	—	—	AWS, Azure, GCP

On-Premise Deployment

The full Codex platform running inside your network perimeter — no code leaves your infrastructure.

The on-premise deployment option packages the entire Codex platform as a Kubernetes-based appliance that runs within your VPC or physical data center. All components — the API gateway, inference engine, code analysis pipeline, and databases — operate inside your network boundary. The appliance requires no outbound internet connectivity after initial deployment: model updates and platform patches are delivered as signed offline update packages that you transfer via your existing secure media processes.

Deployment topology is flexible. Organizations can run Codex on AWS using PrivateLink endpoints, on Azure behind Azure Private Link, or on GCP with VPC Service Controls. On-premise deployments in physical data centers use the same Kubernetes operator and are validated against vanilla Kubernetes 1.28+ on certified distributions including OpenShift and Rancher. The deployment guide includes Terraform modules and Helm charts that provision the full stack with your organization's encryption keys, certificate authorities, and network policies.

Identity and Access Management

Integrate Codex with your existing identity provider — SAML, OIDC, and SCIM provisioning in one configuration.

Codex Enterprise integrates with your identity provider through SAML 2.0 and OpenID Connect. Once configured, users authenticate with their existing corporate credentials — no separate Codex passwords to manage or rotate. SCIM provisioning automates user lifecycle: when a developer joins your organization in the identity provider, they gain Codex access automatically. When they leave, access is revoked within minutes. The integration supports Just-in-Time provisioning for SAML and on-demand sync for SCIM.

Role-based access control provides fine-grained permissions. Pre-built roles include Platform Administrator, Team Lead, Developer, and Read-Only Auditor. Custom roles let you define permissions at the action level — for example, a role that can generate code and run reviews but cannot modify project configuration or access billing information. All role assignments and permission changes are captured in the immutable audit log. Temporary access grants with automatic expiration are available for contractors and short-term collaborators.

Audit Logging and SIEM Integration

Every action recorded, immutable, and exportable — audit logs serve compliance, security, and operational needs simultaneously.

Codex Enterprise captures an audit event for every action in the platform. Each event includes a timestamp with microsecond precision, the authenticated user identity, the action performed, the target resource, the source IP address, and the outcome. Logs are written to an append-only store — once written, an event cannot be modified or deleted. Retention periods are configurable by your organization and can be set to meet specific regulatory requirements.

Audit logs export to your SIEM through a streaming API that delivers events in JSON format within seconds of generation. Native integrations exist for Splunk, Datadog, and Elastic. Custom SIEM destinations are supported through a configurable webhook that signs each event payload with HMAC-SHA256 for integrity verification. The audit log schema is documented in the API reference with example queries for common compliance use cases: listing all access grants in a time window, identifying failed authentication attempts, and producing a complete activity trail for a specific resource.

Data Residency and Sovereignty

Process and store code in specific geographic regions — Codex respects data residency requirements at the infrastructure level.

Codex Enterprise supports data residency controls that pin all processing and storage to designated geographic regions. Available regions include North America (us-east, us-west), Europe (eu-west, eu-central), and Asia-Pacific (ap-northeast, ap-southeast). When data residency is configured, the code you send to Codex for generation and review never leaves the specified region — not for processing, not for storage, not for backup. This is enforced through infrastructure-level controls, not just routing configuration.

For organizations subject to data sovereignty regulations, the on-premise deployment model provides the strongest guarantee: all data remains within your physical infrastructure under your exclusive control. The cloud deployment with data residency is suitable for organizations that require geographic restrictions but do not need full on-premise isolation. Both models support customer-managed encryption keys (CMK) — Codex never has access to your encryption keys, so even platform administrators cannot access your code in decrypted form.

Compliance Certifications

SOC 2 Type II certified, HIPAA-ready with BAA, FedRAMP in process — compliance documentation available for your security review.

Codex maintains SOC 2 Type II certification with an unqualified opinion from an accredited AICPA auditor. The SOC 2 report covers the Security and Availability Trust Service Criteria. HIPAA compliance is supported through a Business Associate Agreement available to Enterprise customers in healthcare — the BAA covers code review and generation workflows that may process protected health information in code comments and test fixtures. FedRAMP Moderate authorization is in process with a target completion within the current fiscal year.

Compliance documentation — including the SOC 2 report, penetration test summaries, and security architecture whitepaper — is available to Enterprise prospects under NDA. The security compliance center in the Codex dashboard provides current customers with real-time access to compliance artifacts, certificate status, and the vulnerability disclosure program. Organizations with custom compliance requirements can engage the Codex security team for additional controls, custom audit scoping, and dedicated compliance support through the Enterprise support channel.