Edgardo

Security Overview

We treat data security and confidentiality as the foundational layer of our infrastructure. We understand that enterprise AI training data often contains proprietary or highly sensitive information. To mitigate all risk, we operate on a strict Zero-Trust Architecture, ensuring that client data is compartmentalized, monitored, and protected at every stage of the annotation lifecycle. Our comprehensive security protocols include: Cybersecurity & Network Infrastructure Zero-Trust Network Access (ZTNA): All systems operate on a principle of least privilege. Access to client data is strictly restricted via Role-Based Access Control (RBAC), meaning specialists only see the specific data packets required for their immediate task. Isolated Processing Environments: We utilize localized, containerized environments (via Docker) and secure Virtual Private Networks (VPNs). Data is never synced to unauthorized public clouds or third-party drives. Data Encryption: All data in transit and at rest is secured using enterprise-grade encryption protocols (AES-256) to prevent interception or unauthorized access. Endpoint & Physical Security Measures Endpoint Hardening: All operational workstations are strictly configured for production only. External storage devices (USB drives) are systemically disabled, and unauthorized software installation is blocked to prevent data exfiltration. Clean Workspace Protocol: We enforce a strict "Clean Desk" and "Clear Screen" policy. Mobile phones, recording devices, and physical writing materials are strictly prohibited in the active workspace. Secure Facilities: Work environments require secure authentication to access, with screens positioned to prevent shoulder-surfing and unauthorized viewing. Personnel Confidentiality & Data Handling Ironclad Non-Disclosure Agreements (NDAs): Every specialist and operator must sign comprehensive, legally binding NDAs and data protection agreements prior to onboarding. Mandatory Privacy Calibration: Before touching any client data, all personnel undergo rigorous training on global data privacy standards, including alignment with GDPR and the Data Privacy Act of 2012. Zero-Retention Policy: Upon project completion and client sign-off, all localized client data is permanently purged from our operational environments using secure deletion protocols. Audits & Compliance Automated Activity Logging: Our infrastructure tracks and logs all user interactions within the annotation tools, providing a clear audit trail of who accessed which data asset and when. Routine Security Audits: We conduct regular internal reviews of our network security, access logs, and workflow compliance to identify and patch potential vulnerabilities before they can be exploited.