Skip to content

Security

Data security and privacy to enterprise standards

A read-only EPİAŞ user account is enough for the backtest. A non-disclosure agreement is signed before any data is shared; each supplier's data is kept in a separate environment, and all data transfer is encrypted.

  • Enterprise cloud infrastructure

    The platform runs on a hybrid architecture across AWS and Huawei Cloud. Physical and infrastructure security follow the standards of these enterprise cloud providers.

  • Access control

    Users sign in through single sign-on (SSO) with Azure AD. With role-based access control, each user sees only the data they are authorised to see.

  • Separation of supplier data

    Each supplier's data is kept in a separate environment, and models are trained only on that supplier's data. Data is not shared with any other supplier; this commitment is written into both the non-disclosure agreement and the service agreement.

  • Encryption and network security

    All data transfer is encrypted with TLS. The application layer is protected by a web application firewall (WAF).

  • Least privilege

    For the backtest, a read-only EPİAŞ user account limited to the meter list and consumption data is enough. In live operation, only the permissions required by the features you use are requested.

  • Non-disclosure agreement

    A mutual non-disclosure agreement is signed before we see your data. Data processing terms are set out in the service agreement.

Team and roadmap

Security experience and roadmap

  • A team with experience of working with enterprise cybersecurity data.
  • ISO 27001 certification is on our roadmap.

Request a backtest for your portfolio

In the first meeting we talk through your portfolio, the backtest process and the data processing terms.

Request a meeting