Security
Clear controls, clear deployment options and a precise view of what is available today.
Security
These are the controls Minervaly Cloud supports today. They are not a certification claim.
Encryption in transit with HTTPS/TLS
Encryption of data at rest
Company and workspace data separation
Authentication and access controls
Activity and audit records
Backups
Data retention and deletion controls
Customer data is not used to train models
EU hosting and data residency
Model-provider contracts or configurations that prevent training on customer data
| Option | Status | What it means |
|---|---|---|
| Minervaly Cloud | Available today | Hosted and operated by Minerva with the controls above. |
| Dedicated environment | Project delivery | Delivered through an agreed implementation. |
| Customer VPC | Enterprise option | Assessed and prepared within the project; not an instant standard deployment. |
| On-premise | Enterprise option | Subject to technical validation; not a click-to-deploy package. |
| SSO | Enterprise project | Configured during the agreed enterprise implementation. |
Minerva does not currently hold a completed independent pentest, SOC 2 report, ISO 27001 certification or equivalent external assurance for Minervaly. An independent pentest is planned and is required before Minervaly processes real customer data in a first production deployment.
Minervaly provides controls that can support your GDPR, DORA and sector requirements. Compliance depends on your deployment, processes, contracts and legal assessment. You remain responsible for your use, governance and applicable obligations.
contact@minerva-ds.com