PhylaxVault™ Security Overview

Secure. Preserve. Protect.

1.  Security Overview

PhylaxVault™ is an enterprise-grade email archiving, compliance, and recovery solution developed by Squad Systems Private Limited. It is designed to securely capture, process, index, archive, and preserve organizational email communications while supporting controlled access, auditability, retention, legal hold, eDiscovery, and recovery requirements.

2.  Security by Design

PhylaxVault applies security controls throughout the email lifecycle: Capture → Process → Encrypt → Archive →

Search → Recover → Audit. The platform supports real-time email capture, secure processing, indexing, encrypted storage, immutable/tamper-resistant archiving, and controlled retrieval.

3.  Data Encryption

PhylaxVault documentation specifies encryption of data in transit and at rest. The technical documentation also specifies AES-256 encryption for archived email data. Encryption is used to help protect email messages, attachments, metadata, and archived records against unauthorized access.

4.  Immutable and Tamper-Resistant Archiving

PhylaxVault is designed to preserve archived communications in an immutable, tamper-resistant repository. The technical documentation specifies that raw messages cannot be modified after their initial cryptographic hash calculation and describes immutable storage and logging capabilities.

5.  Access Control and Authentication

PhylaxVault supports role-based access controls together with authentication and authorization mechanisms. It can integrate with LDAP and Microsoft Active Directory for user synchronization and enterprise identity management. Customers are responsible for configuring appropriate roles, permissions, and administrator access.

6.  Audit Logging and Monitoring

PhylaxVault provides audit logging and activity tracking. The documented audit trail can record activities such as logins, searches, exports, restores, authentication events, policy changes, and administrative or configuration activity. These records support transparency, governance, investigations, and compliance processes.

7.  Secure Email Capture and Processing

PhylaxVault can capture incoming, outgoing, and internal email communications in real time through supported journaling and ingestion methods. Supported environments include Microsoft 365, Microsoft Exchange, Google Workspace, Postfix/general SMTP environments, and hybrid email infrastructures. Captured messages can be validated, deduplicated, indexed, enriched with metadata, compressed, encrypted, and archived.

8.  Data Ownership and Privacy

Customer email messages, attachments, metadata, and archived records remain the property of the customer organization. PhylaxVault does not claim ownership of customer data and does not sell, rent, or use archived email data for advertising or marketing purposes. Information may be shared only in circumstances described in the applicable privacy documentation.

9.  Retention, Legal Hold and eDiscovery

PhylaxVault supports customer-defined retention policies, legal hold, enterprise search, audit reporting, and eDiscovery workflows. Retention is governed by customer configuration, applicable legal requirements, and organizational policies. Legal hold can be used to preserve selected mailboxes or archived emails during litigation, audits, or investigations.

10.  Deployment Security

PhylaxVault supports on-premises, cloud, and hybrid deployment models, depending on the organization’s architecture and supported integrations. A typical deployment connects the email environment to PhylaxVault, configures retention and access policies, and enables automated capture, indexing, encryption, archiving, search, recovery, and auditing.

11.  Storage Optimization and Availability

The product documentation describes attachment de-duplication, intelligent compression, high-availability architecture, replication/failover capabilities, and scalable storage design. Actual performance and availability depend

on deployment architecture, infrastructure, configuration, storage, network conditions, and third-party service availability.

12.  Recovery and Business Continuity

Authorized users can search, retrieve, export, and restore archived emails through supported interfaces and integrations. Customers remain responsible for defining their backup and disaster-recovery strategy and for maintaining the infrastructure and procedures required to meet business-continuity objectives.

13.  Third-Party Integrations

PhylaxVault may integrate with Microsoft 365, Microsoft Exchange, Google Workspace, LDAP, Active Directory, Outlook integrations, and other supported components. Third-party platforms remain subject to their own security controls, availability, privacy policies, and terms.

14.  Customer Security Responsibilities

Security is a shared responsibility. Customers are responsible for secure installation and configuration, user and permission management, administrator credential protection, retention and compliance policies, lawful processing of data, underlying infrastructure security, and appropriate backup and recovery procedures.

15.  Security Limitations

PhylaxVault implements reasonable and documented security controls, but no software or information system can guarantee absolute security. Security and data integrity may be affected by incorrect configuration, infrastructure failures, network or third-party service disruptions, cybersecurity incidents, hardware or storage issues, or user error.

16.  Security Commitment

PhylaxVault is built to help organizations protect, preserve, search, recover, and govern corporate email communications. By combining encryption, access controls, authentication, immutable/tamper-resistant archiving, audit logging, secure indexing, retention controls, and enterprise integrations, PhylaxVault provides a structured security foundation for enterprise email archiving and compliance workflows.

Security at a Glance

Contact

Squad Systems Private Limited

C-241, Logix Cyber Park, Bhutani Infra, Sector 62, Noida – 201309, Uttar Pradesh, India Email: support@squadsystems.com

Website: www.squadsystems.com

Important: This document describes documented product security capabilities and responsibilities. It is not a certification, warranty, or guarantee of regulatory compliance or absolute security.

© 2026 Squad Systems Private Limited. All Rights Reserved.

PhylaxVault™ is a proprietary software product of Squad Systems Private Limited.