SECURITY
Security & data handling
How we protect the confidential numbers your energy decisions run on.
[ Compliance ]ISO 27001 and SOC 2 certification in progress.
PRACTICES
How the platform is protected
Infrastructure
- Microsoft Azure managed services: compute, storage, managed PostgreSQL.
- Azure data centres hold ISO 27001 and SOC 1/2/3 certification.
- HTTPS-only public endpoints.
Data protection
- TLS 1.2+ in transit.
- AES-256 encryption at rest.
- Automated backups with point-in-time recovery.
Access control
- Role-based, least-privilege production access.
- Managed identities for service-to-service authentication.
- Centralised secrets management with Azure Key Vault.
Development
- Version-controlled, automated CI/CD deploys.
- Infrastructure as code.
- Separate production and development environments.
Data rights
- Customer data is used exclusively to run that customer’s analyses.
- Isolated per customer.
- Deletion on request.
Monitoring & response
- Real-time error and anomaly monitoring.
- Responsible disclosure via security.txt (RFC 9116).
- Reports tracked to resolution.
DISCLOSURE
Found a vulnerability?
Report it to us directly. We respond promptly, and we ask for reasonable time to ship a fix before public disclosure.
/.well-known/security.txt
Live# EarthSync security contact (RFC 9116)Contact: mailto:contact@earthsync.ioExpires: 2027-07-17T00:00:00.000ZPreferred-Languages: enCanonical: https://earthsync.io/.well-known/security.txtPolicy: https://earthsync.io/securityServed over HTTPS · RFC 9116 compliant
Get startedReady to optimise your
Ready to optimise your
energy strategy?
10 GW+
Solar & wind simulated
4 GWh
Battery storage modelled
$1Bn+
In energy decisions