Security

Security Overview

Security is architectural at SINGULANCE, not a policy layer bolted on afterward. Every design decision — tenant isolation, dedicated-deployment options, encryption defaults, credential handling — starts from “what does a regulated European enterprise’s security team need to see” rather than being retrofitted later.

Encryption

• All data in transit is encrypted via TLS
• Connector access tokens and refresh tokens are encrypted at rest (AES-256-GCM) before storage — never stored in plaintext
• Encryption keys are managed separately from application data

Tenant Isolation

Every hosted request is scoped to the authenticated user and organization across database, vector, and graph access paths. Dedicated and self-hosted deployments are available for customers that require physical isolation contractually. Logical isolation and dedicated deployment are distinct controls and are not represented as the same thing.

Infrastructure Partners

We rely on a small number of vetted infrastructure providers, each contractually bound to appropriate security standards:

• EU-based hosting for primary application and database infrastructure
• Cloudflare AI Gateway and configured model providers for inference invoked by a requested feature
• Composio, where used, for specific third-party tool execution you authorize

Access Control & Authentication

• OAuth2-based authentication for every connected service — no shared or hardcoded credentials
• Role-based access control within an organization (admin vs. member permissions)
• Session-based authentication with configurable expiry
• Rate limiting on public-facing endpoints

Incident Response

In the event of a personal-data breach, we notify affected controllers without undue delay and support the information they need for their own obligations. Where SINGULANCE is the controller, we assess notification to the competent supervisory authority within GDPR’s 72-hour window and notify affected individuals when the law requires it.

Contact

For privacy requests, security disclosures, or general questions about this policy, contact us at privacy@singulancelabs.com. For security vulnerability reports specifically, use security@singulancelabs.com.

SINGULANCE · Hannover, Germany