Security
Handled with the care the work requires.
How we control access, record provenance and deliver data. Ask us for our current security documentation.
Practices
What we do, plainly.
- 01
Scoped access
People are granted access to the programs they work on, and no others. Access is reviewed when assignments change.
- 02
Logging and audit
Access to datasets and deliveries is logged, so we can answer who touched what and when.
- 03
Provenance
Capture metadata, calibration, device, operator and reviewer are recorded with the data and carried through every release.
- 04
Controlled delivery
Encrypted transfer by default. Customer-controlled storage, and offline or air-gapped transfer where the program needs it.
- 05
Retention and deletion
Retention is agreed per program. We delete on request and confirm in writing.
Controlled programs
Tell us the constraints first.
Some work has requirements on where data lives, who may handle it and how it moves. These are agreed before collection begins.
If your program has handling requirements, include them in your first message. We will tell you plainly whether we can meet them, and what it would take if we cannot yet.
- DocumentationSecurity and compliance documentation is available on request under NDA.
- QuestionnairesWe will complete your vendor security questionnaire.