Security Overview
Security and privacy are first-class citizens in Condensa’s design. Below is a concise summary of measures and guarantees.
| Measure | Description |
|---|---|
| Data Residency | Supports on-prem GPU deployments or private cloud options for customers with strict residency requirements. |
| Zero Persistence | Files are auto-deleted after processing (configurable retention rules) to reduce data exposure risk. |
| Encryption | AES-256 at rest and TLS 1.3 in transit for all network traffic. |
| Audit Logs | JSON-based audit trails, privacy-respecting, and available for compliance reviews. |
| Role-Based Access | RBAC controls for tenant separation and optional 2FA for user accounts. |
Recommended Security Practices
- Use short-lived tokens (OAuth2) for API calls and rotate secrets regularly.
- Enable VPC/private networking when using cloud-hosted engines.
- Audit and limit access to the Vision Processor service to only trusted systems.
- Configure strict retention rules for processed files and logs.