Trust Center
Our security posture, deployment options, and compliance roadmap — documented honestly.
✅ Verified Build Status
These metrics are verifiable by running npm test in our repository.
View Security Test Details
- Prompt Injection: CendiaGuard™ blocks malicious prompts ✓
- Jailbreak Attempts: DAN/evil mode attacks refused ✓
- Data Extraction: System prompt revelation blocked ✓
- Bias Testing: 11 tests for discrimination, fraud, ethics ✓
- Air-Gap Verification: 11 tests confirm zero external calls ✓
- Rubric-Based Consistency: LLM nondeterminism tolerance validated ✓
Last verified: February 21, 2026 · View on GitHub
📜 Published Conformance Statements
Self-attested conformance statements mapping Datacendia's architecture to major AI governance frameworks. Each document includes cryptographic content hashes for integrity verification.
All PDFs include SHA-256 content hashes on the final page for independent integrity verification. Published February 6, 2026.
Deployment Options
| Mode | Data Location | Our Access | Setup Time |
|---|---|---|---|
| Private Cloud | Your VPC | Metadata only | Days |
| On-Premises | Your data center | None | Weeks |
| Air-Gapped | Isolated network | None | Weeks+ |
Data Handling
- Data ingested Read-only from your sources; we don't modify origin systems
- Data stored Evidence ledger + decision artifacts (encrypted at rest)
- Data retention Configurable; default 90 days for logs, indefinite for audit ledger
- Data export Full export available anytime (JSON, PDF, raw artifacts)
- Training on customer data Never. Your data is not used for model training.
Compliance Roadmap
Last updated: 2026-02-06
Incident Response & Security Testing
High (P2): 8-hour acknowledgment, 72-hour remediation target
Medium (P3): 24-hour acknowledgment, next release remediation
Sovereign tier customers receive dedicated incident response with custom SLAs.
Dependency Scanning: Continuous CVE monitoring via SBOM (CycloneDX)
AI-Specific Testing: Prompt injection, jailbreak, data extraction, bias — 204,000+ automated tests
Penetration Testing: Third-party pen test scheduled for H1 2026. Results will be available under NDA.
Full test breakdown available at Test Results →
Subprocessors
Private Cloud / On-Prem / Air-Gapped: No subprocessors. All processing occurs within your environment.
Distribution vs Data Processing
Datacendia separates software distribution from data processing:
- Software distribution Available via AWS Marketplace (procurement/delivery channel only)
- Runtime location Your infrastructure (on-prem, private cloud, or air-gapped)
- Customer data hosting Never hosted by Datacendia — stays in your environment
- Air-gapped updates Offline install bundles available; no outbound connectivity required
- Telemetry / call-home None required; license validation supports offline mode
Retention & Deletion
Retention policies are configurable per deployment. Default settings:
- Operational logs 90 days default (configurable 30–365 days)
- Audit ledger (decisions) Immutable by design; retention customer-controlled
- Evidence packets Retained until customer-initiated purge
- Personal data separation PII can be purged independently of audit metadata
- Customer-controlled deletion Full data export + deletion available on request
Note: "Immutable" refers to tamper-evidence (append-only with cryptographic hashing), not inability to delete. Customers can purge data per their retention schedules while maintaining audit integrity hashes.
✍️ CendiaNotary™ — Cryptographic Signing Authority
Every decision, every audit entry, every evidence packet is cryptographically signed with your keys. We never see them. Non-repudiation guaranteed.
What CendiaNotary Signs
- Decision Packets: Every Council deliberation outcome
- Audit Ledger Entries: Append-only log with chain integrity
- Evidence Bundles: Compliance exports for regulators
- Test Reports: Signed verification of system health
Zero-Trust Principle: Datacendia never has access to your signing keys. All cryptographic operations occur within your infrastructure.
🏛️ CendiaVault™ — Unified Evidence Storage
All decision artifacts, audit trails, and compliance evidence in one searchable, retention-compliant vault. Immutable storage with legal hold support.
- Standard: 7 years (regulatory default)
- Extended: 10 years (financial services)
- Permanent: Legal hold / litigation
- Custom: Per your compliance requirements
- SHA-256 content hashing
- CendiaNotary™ signatures
- Merkle tree verification
- Tamper-evident append-only design
Legal Hold: Artifacts can be placed on litigation hold, preventing deletion regardless of retention policy. Release requires explicit authorization.
Shared Responsibility Model
Security responsibilities vary by deployment mode:
| Responsibility | Air-Gapped / On-Prem | Private Cloud (VPC) |
|---|---|---|
| Infrastructure security | Customer | Customer + Cloud Provider |
| Network security | Customer | Customer |
| Identity & access (IAM) | Customer | Customer |
| Encryption keys (KMS/HSM) | Customer | Customer |
| Application updates | Customer (offline bundles) | Customer (with Datacendia support) |
| Application security | Datacendia | Datacendia |
| Vulnerability patching | Datacendia (provides patches) | Datacendia (provides patches) |
Vulnerability Disclosure Policy
We appreciate responsible disclosure of security vulnerabilities.
- Report to security@datacendia.com
- Acknowledgment Within 48 hours
- Status updates Regular updates during remediation
- Safe harbor No legal action for good-faith research
See security.txt for machine-readable disclosure information.
Anonymized Pilot Case Studies
Four anonymized case studies from real pilots — industrial manufacturing, financial services, healthcare, and public-sector adjacent. No inflated metrics. No AI accuracy claims.
Related Trust Resources
Need to complete a security questionnaire or schedule a security review?
SYSTEM STATUS: AIR-GAP READY · NO TRACKER PIXELS DETECTED