Security is not just a feature. It’s our foundation.

Every design decision in Arex begins with the safety and privacy of your data in mind.



Security is not just a feature. It’s our foundation.

Every design decision in Arex begins with the safety and privacy of your data in mind.

Protecting Client Data

Arex serves clients globally, helping them protect, store and share their sensitive data. Protecting client data remains paramount to our company mission and Arex complies with industry standards, conducting regular audits shared transparently with users. Through an open source approach, Arex software is viewed and scrutinized by an engaged community around the world.

HIPAA

Arex is officially HIPAA-compliant after receiving a HIPAA Security Rule Assessment Report from AuditOne in December 2020.

GDPR

Arex complies with GDPR and current applicable EU data protection rules. In addition, Bitwarden uses and complies with EU Standard Contractual Clauses (SCCs).

Privacy Shield

Arex complies with the EU-U.S., Swiss-U.S. Privacy Shield Frameworks.

CCPA

Arex is compliant with the California Consumer Privacy Act (CCPA).

 

Identity and Access Management from Anywhere

Life is happening online. Work. Play. Family and friends. Arex puts your digital life at your fingertips, simply and securely.

 

Personalized access control and security


Protect your sensitive data against cybercriminals

A robust Identity and Access Management improves business security, but it doesn’t protect against all cybercrimes. Enforcing two-factor authentication (2FA) policies takes that next step, but you can take user authentication even further by implementing Multifactor Authentication (MFA). 

MFA adds another layer of security by requiring extra authentication prior to granting access. Additional types of authentication protocols such as mobile device push notifications and fingerprint verification reduce data breaches by limiting who has access to specific access points.

Protecting Client Data

Arex serves clients globally, helping them protect, store and share their sensitive data. Protecting client data remains paramount to our company mission and Arex complies with industry standards, conducting regular audits shared transparently with users. Through an open source approach, Bitwarden software is viewed and scrutinized by an engaged community around the world.

HIPAA

Arex is officially HIPAA-compliant after receiving a HIPAA Security Rule Assessment Report from AuditOne in December 2020.

GDPR

Arex complies with GDPR and current applicable EU data protection rules. In addition, Arex uses and complies with EU Standard Contractual Clauses (SCCs).

Privacy Shield

Arex complies with the EU-U.S., Swiss-U.S. Privacy Shield Frameworks.

CCPA

Arex is compliant with the California Consumer Privacy Act (CCPA).

 

Identity and Access Management from Anywhere

Life is happening online. Work. Play. Family and friends. Arex puts your digital life at your fingertips, simply and securely.

Learn more

 

Personalized access control and security


Protect your sensitive data against cybercriminals

A robust Identity and Access Management improves business security, but it doesn’t protect against all cybercrimes. Enforcing two-factor authentication (2FA) policies takes that next step, but you can take user authentication even further by implementing Multifactor Authentication (MFA).

MFA adds another layer of security by requiring extra authentication prior to granting access. Additional types of authentication protocols such as mobile device push notifications and fingerprint verification reduce data breaches by limiting who has access to specific access points.


Only you have access to your Arex data.

Your Arex data is end-to-end encrypted to keep it safe at rest and in transit. Our security recipe starts with AES 256-bit encryption, and we use multiple techniques to make sure only you have access to your information.

Your Secret Key protects your data off your devices.

Your Secret Key is created locally on your device. It’s combined with your Master Password to authenticate you with our server and encrypt your Arex data.

Secure Remote Password protects your data in transit.

Your Arex account uses SRP to authenticate your credentials without sending them over the Internet. It also encrypts all traffic sent to our server.

Your Master Password protects your data on your devices.

Only you know your Master Password: it’s never stored alongside your data or sent over the network. It protects your data if someone has access to your device.