Security
Security and deployment for document operations.
Clear controls, clear deployment options and a precise view of what is available today.
Managed-cloud controls available today.
These are the controls Minervaly Cloud supports today. They are not a certification claim.
- Encryption in transit with HTTPS/TLS
- Encryption of data at rest
- Company and workspace data separation
- Authentication and access controls
- Activity and audit records
- Backups
- Data retention and deletion controls
- Customer data is not used to train models
- EU hosting and data residency
- Model-provider contracts or configurations that prevent training on customer data
Deployment options have different delivery conditions.
| Option | Status | What it means |
|---|---|---|
| Minervaly Cloud | Available today | Hosted and operated by Minerva with the controls above. |
| Dedicated environment | Project delivery | Delivered through an agreed implementation. |
| Customer VPC | Enterprise option | Assessed and prepared within the project; not an instant standard deployment. |
| On-premise | Enterprise option | Subject to technical validation; not a click-to-deploy package. |
| SSO | Enterprise project | Configured during the agreed enterprise implementation. |
Independent assurance status.
Minerva does not currently hold a completed independent pentest, SOC 2 report, ISO 27001 certification or equivalent external assurance for Minervaly. An independent pentest is planned and is required before Minervaly processes real data from the first pilot customer.
Controls support requirements; they do not create compliance automatically.
Minervaly provides controls that can support your GDPR, DORA and sector requirements. Compliance depends on your deployment, processes, contracts and legal assessment. You remain responsible for your use, governance and applicable obligations.
contact@minerva-ds.com