Security
Advanced tools require advanced security.
Data Protection
Encryption
In Transit: All data is encrypted using TLS/SSL (via HTTPS). No HTTP routes are permitted.
At Rest: Generated reports are currently stored as plain JSON with database-level encryption. Will be enforced with additional AES encryption in the future.
Secure API Communication
Interactions with external AI providers (e.g., OpenAI, Gemini, Anthropic) are conducted via their native SDKs. These SDKs are regularly updated and scanned for vulnerabilities, ensuring secure communication.
Access Controls
Role-Based Permissions: Granular control ensures only authorized users in your organization can view or manage specific data.
Session Management: Sessions are tracked using cookies, expiring after 1 hour. A refresh token system allows sessions to be extended for up to 7 days, but tokens can be revoked at any time. All settings are configurable.
Infrastructure Security
Server Protection
Hosting: edena is currently hosted on Replit, with Q3 plans to migrate to a cloud-based infrastructure compliant with ISO 27001 and SOC 2 standards.
Network Security: Firewalls, intrusion detection systems (IDS), and regular vulnerability scans are in place.
Data Isolation
User data is segregated by unique IDs, ensuring no cross-access between accounts.
Compliance
Regulatory Standards: We adhere to GDPR, CCPA, and other relevant data privacy regulations.
Privacy Policy: edena does not sell or share your data with third parties outside of the services required to deliver insights.
Regular Monitoring and Updates
Proactive Monitoring: Systems are continuously monitored for threats.
Patch Management: Security updates are applied promptly to address vulnerabilities.
Your Responsibilities
To help maintain a secure environment:
Use strong, unique passwords for your edena account.
Avoid sharing sensitive credentials or data over unsecured channels.
Keep your browser up to date to ensure it includes the latest security patches.
Avoid accessing edena on public or unsecured networks.
Last updated