SECURITY

Infrastructure Security

At SentianAI, we prioritize security with strictly defined access control, information security, and development practices. We follow the principle of least privilege and fine-grained, role-based access control, enforced via Azure Active Directory. Access to our production environment is restricted and audited, and we use encryption tools like Azure KeyVault to protect internal keys and sensitive data.

Data Security

We prioritize the security of your data. All customer data is encrypted at rest and in transit, adhering to industry best practices. We leverage tools like Azure KeyVault and TLS 1.2 encryption with restricted cipher suites for secure data transfer. Access to your data is limited to specific authorized employees and only within controlled environments.

Application Security

End-user identity verification and access is provided by Auth0, which offers various integration options to suit your specific security and access management needs. Our comprehensive DevSecOps tooling, including integrated security testing in the CI/CD pipeline and compliance tooling, ensures security at every step of our product development process.

Organization & Governance

Our commitment to information security is embedded in our organization and governance framework. We have established policies and procedures covering access control, asset management, business continuity and disaster recovery planning, cryptography, incident response planning, secure development, and more.

AI Transparency & Explainability

Building trust with plant operators is essential, which is why we focus on transparency. Our AI solutions provide visibility into its current actions, historical performance, and future plans. We believe in turning the "black box" into a "white box" to enhance transparency and enable operators to understand and trust the AI's decision-making process.