Security, in the detail your IT team needs
Where your data lives, how it's protected, and who can reach it
DataCNVS is built with security at the foundation, from encrypted data storage and secure connections to tenant-aware access controls and managed AWS infrastructure. For organizations with additional requirements, DataCNVS Enterprise can be tailored to your identity, data-governance, and security needs.
Your scientific data stays yours
Scientific data can represent years of research, proprietary formulations, experimental results, and competitive advantage. DataCNVS is designed to keep that data focused on the work it was created for.
No customer-data model training
DataCNVS does not use customer scientific data to train AI models.
No third-party analytics pipeline
The application does not currently use third-party analytics or telemetry services that ingest customer scientific data.
Sharing happens by design
Your data is available to the people and teams you choose to collaborate with through DataCNVS's workspace and sharing controls.
Encrypted, isolated, and running on AWS
Encrypted at rest
Your scientific data is encrypted while stored using AWS encryption technologies, including AWS KMS for core application and data stores.
Encrypted in transit
Connections to DataCNVS are protected with TLS, including the application, APIs, real-time collaboration, and file-transfer services.
Tenant-aware access control
DataCNVS keeps organizations logically separated and applies authorization checks whenever data is accessed or changed. Users can access data belonging to their organization or data that has been explicitly shared with them.
Built on secure AWS infrastructure
DataCNVS is built using managed AWS services with built-in security, encryption, identity, and access-control capabilities. This gives DataCNVS a strong infrastructure security foundation while allowing us to focus on protecting scientific data and controlling how it is accessed.
Identity and access
DataCNVS provides secure authentication and workspace-level authorization for collaborative scientific teams.
When an administrator removes a user's DataCNVS membership or deactivates their account, their application access is revoked and active application sessions are invalidated.
Google sign-in
Two-factor authentication
Enterprise identity requirements
Your organization's identity architecture may require more than a standard login. Enterprise customers can work with the DataCNVS team on requirements such as:
Have a specific identity requirement? Talk to the DataCNVS team.
Data retention and deletion
Scientific data has a lifecycle. Some files are temporary inputs to a workflow; other datasets need to remain available for years. DataCNVS supports controls designed around those different lifecycles.
Automatic expiration of original uploads
Original files uploaded for parsing automatically expire after the configured retention period, currently 30 days by default. This helps limit the lifetime of source files that are only needed to create the resulting dataset.
Organization-level deletion
DataCNVS supports organization-level data deletion workflows for customers who need to permanently remove a workspace and its associated data.
Enterprise data-governance requirements
Retention periods, deletion workflows, archival requirements, and data-governance policies can vary significantly between organizations. Enterprise customers can work with the DataCNVS team to define the approach appropriate for their environment.
For your security review
DataCNVS is designed to fit into the security and procurement processes of organizations where scientific data is business-critical.
Our architecture uses encrypted storage, secure network connections, managed cloud infrastructure, application-level authorization, and centralized secret-management mechanisms.
For enterprise evaluations, the DataCNVS team can provide additional information about our architecture, data flows, security controls, and operational practices as part of your organization's review.
Architecture & data flows
Understand where data is stored, processed, and transferred.
Security controls
Review the controls that protect access to customer data and infrastructure.
Vendor & security assessments
Work directly with the DataCNVS team during your organization's evaluation process.
Tell us what your organization requires
A global manufacturer, research organization, and high-tech materials company may have very different requirements for identity, data residency, retention, access, and operational controls.
DataCNVS Enterprise is designed to work with those requirements.
Whether your organization needs a specific SSO architecture, retention policy, data-governance approach, or other security control, we can work with your team to determine the right solution.
Have a requirement?
Tell us what your security or IT organization needs and we'll work through the appropriate approach with you.
Looking for the product? See DataCNVS