Security. Research worth protecting.
Twins combine sensitive data about infrastructure, populations and businesses. We protect it as if it were our own.
Encryption
Data is encrypted in transit (TLS) and at rest.
Least-privilege access
Every partner and team member can reach only what they need. Projects are isolated from each other.
EU and GDPR
We aim to host project data in the EU and to keep personal data to a minimum.
Audit trail
Every data import, model run and change is logged so it can be reviewed.
How we work
- Multi-factor authentication on every team account.
- Secrets never go into code or repositories; we scan automatically before any code is pushed.
- Private code repositories and regular backups.
- Data processing agreements with every pilot partner.
What we do not claim yet
We are at concept stage. We do not yet hold security certifications such as ISO 27001. The principles above describe how we design and how we will operate; we will only list a certification once we have it.
Reporting a security issue
If you find a security weakness, please contact us through the contact page. →