AEVIONTrust · IP · Globus
DemoExploreShopAuthQRightQSignBureauPlanetAwardsBankChessPricingAPI
← All tiers
GLOSSARY · 31 TERMS

AEVION glossary

What TSP, eIDAS, SOC 2, BYOK, RBAC and other abbreviations from the docs mean. EN/RU descriptions and cross-links.

CATEGORY:
LETTER:

152-ФЗ

On Personal Data (Russian Federation)COMPLIANCE

Russian Federal Law on Personal Data. AEVION compliant: Russian citizen data stays on RF servers for Russian customers.

EN: Russian Federal Law on Personal Data. AEVION compliant: Russian citizen data stays on RF servers for Russian customers.

See also: GDPR

ARR

Annual Recurring RevenueBILLING & METRICS

Annual Recurring Revenue — key SaaS metric. AEVION publishes aggregate ARR in annual reports.

EN: Annual Recurring Revenue — key SaaS metric. AEVION publishes aggregate ARR in annual reports.

See also: MRR

BYOK

Bring Your Own KeyTECH

Customer brings their own encryption keys (e.g. AWS KMS, Azure Key Vault). Available on Enterprise tier.

EN: Customer brings their own encryption keys (e.g. AWS KMS, Azure Key Vault). Available on Enterprise tier.

See also: HSM

CAC

Customer Acquisition CostBILLING & METRICS

Cost to acquire one customer. LTV/CAC > 3 indicates a healthy SaaS.

EN: Cost to acquire one customer. LTV/CAC > 3 indicates a healthy SaaS.

See also: LTV

DPA

Data Processing AgreementCOMPLIANCE

Data processing agreement between customer and SaaS. Required by GDPR. Available on AEVION Enterprise.

EN: Data processing agreement between customer and SaaS. Required by GDPR. Available on AEVION Enterprise.

See also: GDPR

eIDAS

electronic IDentification, Authentication and trust ServicesLEGAL & IP

EU Regulation 910/2014 on trust services: e-identification, signature, seal, delivery. AEVION QSign is eIDAS-compatible.

EN: EU Regulation 910/2014 on trust services: e-identification, signature, seal, delivery. AEVION QSign is eIDAS-compatible.

See also: TSP, QES, SOC 2

GDPR

General Data Protection RegulationCOMPLIANCE

EU regulation on personal data protection (2018). AEVION offers data residency in EU/RU/KZ, full export and right-to-be-forgotten.

EN: EU regulation on personal data protection (2018). AEVION offers data residency in EU/RU/KZ, full export and right-to-be-forgotten.

See also: DPA, 152-ФЗ

HSM

Hardware Security ModuleTECH

Hardware Security Module for cryptographic keys. AEVION uses HSM-compatible storage with 90-day key rotation.

EN: Hardware Security Module for cryptographic keys. AEVION uses HSM-compatible storage with 90-day key rotation.

See also: BYOK

IP

Intellectual PropertyLEGAL & IP

Intellectual Property: copyrights, trademarks, patents, know-how. AEVION QRight + IP Bureau cover the full IP lifecycle.

EN: Intellectual Property: copyrights, trademarks, patents, know-how. AEVION QRight + IP Bureau cover the full IP lifecycle.

ISO 27001

Information Security Management SystemsCOMPLIANCE

International standard for information security management. AEVION is ISO 27001 certified for Enterprise tier.

EN: International standard for information security management. AEVION is ISO 27001 certified for Enterprise tier.

See also: SOC 2

LTV

Lifetime ValueBILLING & METRICS

Total revenue per customer over their lifetime. AEVION affiliates earn 20% of LTV.

EN: Total revenue per customer over their lifetime. AEVION affiliates earn 20% of LTV.

See also: CAC

MFA

Multi-Factor AuthenticationAUTHENTICATION

Two-factor (or more) authentication. Mandatory for all AEVION accounts.

EN: Two-factor (or more) authentication. Mandatory for all AEVION accounts.

MRR

Monthly Recurring RevenueBILLING & METRICS

Monthly Recurring Revenue. ARR = MRR × 12.

EN: Monthly Recurring Revenue. ARR = MRR × 12.

See also: ARR

MSA

Master Services AgreementCOMPLIANCE

Master Services Agreement: umbrella terms for all SOW. AEVION uses MSA for Enterprise contracts.

EN: Master Services Agreement: umbrella terms for all SOW. AEVION uses MSA for Enterprise contracts.

See also: DPA, SLA

NDA

Non-Disclosure AgreementCOMPLIANCE

Non-Disclosure Agreement. AEVION QSign has an NDA template for one-click signing.

EN: Non-Disclosure Agreement. AEVION QSign has an NDA template for one-click signing.

NPS

Net Promoter ScoreBILLING & METRICS

Customer satisfaction metric (-100 to +100). AEVION NPS = +72 as of 2026-04.

EN: Customer satisfaction metric (-100 to +100). AEVION NPS = +72 as of 2026-04.

OIDC

OpenID ConnectAUTHENTICATION

JSON-based SSO over OAuth 2.0. AEVION OIDC + JWT for API auth.

EN: JSON-based SSO over OAuth 2.0. AEVION OIDC + JWT for API auth.

See also: SSO, SAML

OWASP

Open Web Application Security ProjectOPERATIONS

Community for security best practices. OWASP Top-10 checks in AEVION CI.

EN: Community for security best practices. OWASP Top-10 checks in AEVION CI.

PCI DSS

Payment Card Industry Data Security StandardCOMPLIANCE

Payment card data security standard. AEVION QPayNet is Level 1 certified for embedded payments.

EN: Payment card data security standard. AEVION QPayNet is Level 1 certified for embedded payments.

QES

Qualified Electronic SignatureLEGAL & IP

Qualified Electronic Signature (eIDAS). Legally equivalent to handwritten in all EU member states.

EN: Qualified Electronic Signature (eIDAS). Legally equivalent to handwritten in all EU member states.

See also: eIDAS

RBAC

Role-Based Access ControlAUTHENTICATION

Role-Based Access Control with granular per-object permissions. AEVION includes MFA + SSO + RBAC.

EN: Role-Based Access Control with granular per-object permissions. AEVION includes MFA + SSO + RBAC.

RFC 3161

Internet X.509 PKI Time-Stamp ProtocolLEGAL & IP

IETF standard for time-stamping. Defines TSP request/response structure and timestamp authority signature format.

EN: IETF standard for time-stamping. Defines TSP request/response structure and timestamp authority signature format.

See also: TSP

RPO

Recovery Point ObjectiveOPERATIONS

Acceptable data loss on failure. AEVION RPO ≤ 1 hour: replication across 2+ availability zones.

EN: Acceptable data loss on failure. AEVION RPO ≤ 1 hour: replication across 2+ availability zones.

See also: RTO

RTO

Recovery Time ObjectiveOPERATIONS

Acceptable recovery time after failure. AEVION RTO ≤ 4 hours: quarterly DR drills.

EN: Acceptable recovery time after failure. AEVION RTO ≤ 4 hours: quarterly DR drills.

See also: RPO

SaaS

Software as a ServiceBILLING & METRICS

Software as a Service. AEVION is a multi-product SaaS with 40 modules.

EN: Software as a Service. AEVION is a multi-product SaaS with every module.

SAML

Security Assertion Markup LanguageAUTHENTICATION

XML standard for SSO. AEVION supports SAML 2.0 IdP-initiated and SP-initiated.

EN: XML standard for SSO. AEVION supports SAML 2.0 IdP-initiated and SP-initiated.

See also: SSO, OIDC

SIEM

Security Information and Event ManagementOPERATIONS

Security event monitoring system (Splunk, Datadog, ELK). AEVION exports audit log to SIEM via webhook or S3.

EN: Security event monitoring system (Splunk, Datadog, ELK). AEVION exports audit log to SIEM via webhook or S3.

SLA

Service Level AgreementCOMPLIANCE

Service Level Agreement: uptime, response-time, credits on breach. AEVION SLA: 99.9% (all), 99.95% (Enterprise).

EN: Service Level Agreement: uptime, response-time, credits on breach. AEVION SLA: 99.9% (all), 99.95% (Enterprise).

See also: MSA

SOC 2

Service Organization Control 2COMPLIANCE

AICPA audit standard for SaaS: Security, Availability, Processing Integrity, Confidentiality, Privacy. AEVION is SOC 2 Type II certified.

EN: AICPA audit standard for SaaS: Security, Availability, Processing Integrity, Confidentiality, Privacy. AEVION is SOC 2 Type II certified.

See also: ISO 27001, GDPR

SSO

Single Sign-OnAUTHENTICATION

Single sign-on via corporate IdP. AEVION supports SAML 2.0 and OpenID Connect.

EN: Single sign-on via corporate IdP. AEVION supports SAML 2.0 and OpenID Connect.

See also: SAML, OIDC

TSP

Time-Stamping ProtocolLEGAL & IP

Time-Stamping Protocol (RFC 3161). Proves a document existed at a specific moment without revealing content. AEVION QSign uses TSP for every signature.

EN: Time-Stamping Protocol (RFC 3161). Proves a document existed at a specific moment without revealing content. AEVION QSign uses TSP for every signature.

See also: eIDAS, RFC 3161

Missing a term?

Email — we'll add it. Glossary grows on customer requests.

hello@aevion.io