Security Policy

2. Security Framework

Tenancy Model

Snowvault is a multi-tenant platform with strict logical isolation between customer organisations.

Each organisation's data is isolated at the tenancy and workspace level. Access boundaries are enforced using scoped identities, tenancy-aware authorisation checks, and least-privilege policies. Platform management operations are performed via shared services that are technically prevented from accessing customer content unless explicitly authorised for support or troubleshooting.

Data Movement

Data movement is configured per organisation and per connector (such as Microsoft 365).

All processing occurs in ephemeral execution environments with no persistent local storage. Execution context, authorisation and tenancy identity are bound together for every request, preventing cross-tenant data access. AI processing and agent execution only operate on data explicitly authorised within the current workspace or workflow context.

Data Storage

Customer data is stored in logically isolated data stores with tenancy-scoped access controls.

Role-based access control restricts access to data by organisation, workspace and role. Write paths such as ingestion, indexing and enrichment are segregated from read paths such as retrieval, analysis and generation. Vectorised and derived representations inherit the same tenancy and access constraints as their source documents.

3. Zero Trust Model

Snowvault operates under a zero-trust security model.

• Every request requires explicit authentication and authorisation
• All services operate using least-privilege identities
• Ephemeral compute services run with scoped permissions and no standing credentials
• Internal service-to-service communication uses managed credentials and message validation
• External endpoints are protected by Web Application Firewalls with protections against common web-based threats, including the OWASP Top 10

5. Security Operations

Identity and Access Control

Access to Snowvault internal systems is managed through single sign-on with mandatory multi-factor authentication.

Strong password policies and access controls are enforced. Role-based access controls restrict access to customer data to authorised personnel only. Administrative access is tightly limited, logged and reviewed.

Compliance, Monitoring and Alerting

Snowvault employs layered security controls across awareness, preventative, detective and remediation categories.

Cloud audit logs and configuration state are continuously monitored. Automated detection mechanisms identify anomalous or non-compliant behaviour. Automated remediation is applied where safe to do so, and alerts are raised to operations staff for investigation and escalation when required.

Secure Software Delivery

All production changes follow peer-reviewed pull request workflows.

Infrastructure and configuration changes are managed using infrastructure-as-code. Automated static application security testing and dependency scanning are used to detect vulnerabilities. Identified issues are tracked and remediated as part of the software development lifecycle.

7. Audit and Logging

Authentication events, data access, administrative actions and system changes are logged.

Audit logs are retained in tamper-resistant storage and monitored for anomalous behaviour. Logs support forensic investigation and incident response activities when required.