For IT, security and procurement teams
Security & deployment
How a Cybertron engagement is set up, and what we agree with your team before we access any customer data.
Where Cybertron runs
Each engagement is scoped for your infrastructure: in your own environment, in your cloud tenant, or as a hybrid, using the AI models and engineering tools your organisation approves. Which option fits your project, and what it requires, is part of the technical review.
Agreed in every pilot before customer data access
- Data categories and data flow: which project data the environment reads, where it is processed and where results are stored.
- Model providers and external calls: which models are used, where they run, and which calls, if any, leave your environment.
- Tool credentials and access: least-privilege access to the requirements, repositories and execution tools in scope.
- Logging and retention: what is logged, where logs live and how long they are kept.
- Integration scope: supported integrations and any adapters that need to be built.
- Responsibilities: who operates, reviews and approves what, on your side and ours.
- Deletion and exit: how data, credentials and environments are removed at the end.
- Contracts: a data-processing agreement, subprocessors and international transfers, where required.
Information security readiness
ISO/IEC 27001 and GDPR readiness work has been undertaken. Certification is not yet completed. Security documentation and the remaining audit steps can be reviewed during procurement.
What this website does and does not state
- Deployment properties such as network isolation, restricted egress, single sign-on, encryption and model-training restrictions are defined and verified for each deployment. They are not general guarantees made on this website.
- Cybertron does not claim an ISO/IEC 27001 certification, a GDPR certification, a SOC 2 report or a TISAX label. A SOC 2 assessment is an option if a customer requires it.
- ISO 26262 and related standards describe the engineering work Cybertron supports in your projects. They are not a certification of Cybertron.
- EU AI Act obligations depend on the specific system and its use and are assessed per use case.
- NVIDIA Inception and AWS Activate are startup-program memberships. They are not security or compliance assurances.
This website
A static website: no analytics, no tracking, no web forms and no third-party embeds. Fonts, images, 3D models and scripts are delivered with the site. The only stored items are your optional theme and language choices. Details: Privacy.
Technical and security review
Send us your questionnaire or the questions your team needs answered before a pilot.
To report a security issue concerning this website, email ahmed@cybertron-labs.com.