Security. Research worth protecting.
Twins combine sensitive data about infrastructure, populations and businesses. We protect it as if it were our own.
Photo: Denny Müller · Unsplash LicenseData protection as the foundation.
A twin is only worth building if partners can trust that their data is safe. That is why security and data protection are part of the design from day one, not something added later. These are the four principles we build on.
Encryption
Data is encrypted in transit (TLS) and at rest.
Least-privilege access
Every partner and team member can reach only what they need. Projects are isolated from each other.
EU and GDPR
We aim to host project data in the EU and to keep personal data to a minimum.
Audit trail
Every data import, model run and change is logged so it can be reviewed.
How we work.
Principles only count if they show in daily work. These are the practices we already follow for our code, our accounts and our partnerships.
- Multi-factor authentication on every team account.
- Secrets never go into code or repositories; we scan automatically before any code is pushed.
- Private code repositories and regular backups.
- Data processing agreements with every pilot partner.
What we do not claim yet
We are at concept stage. We do not yet hold security certifications such as ISO 27001. The principles above describe how we design and how we will operate; we will only list a certification once we have it.
Reporting a security issue
If you find a security weakness, please email us at [email protected] or contact us through the contact page.
Want to discuss a project with sensitive data?
Join the waitlist or apply as a pilot partner. Data use is agreed in writing before any project starts.
Concept stage. No product is live yet.