Security Overview

The following security terms apply to all teams that have signed a cooperation agreement with us. Physical Security All work carried out by partner teams must take place in controlled environments with restricted access. Workstations must be password-protected, and access to internal systems should be limited to authorized personnel only. In addition, all external teams working with us are subject to random on-site inspections conducted by Dorena AI to ensure ongoing compliance with our physical security standards. Cybersecurity Partner teams must ensure that all devices are protected with up-to-date antivirus software and firewalls. All data transmission must occur over secure, encrypted channels (e.g., VPN or SSL). Data should be stored only on approved cloud platforms with established security standards (such as AWS or Google Cloud), and no sensitive client data may be stored locally. Confidentiality & Training All team members must sign a non-disclosure agreement (NDA) before accessing any client project materials. Partner teams are responsible for training their personnel on data privacy, secure handling procedures, and project-specific confidentiality rules. Access Control Partner teams must implement role-based access control (RBAC), ensuring that personnel can only access the data necessary for their assigned tasks. All systems must require strong passwords, and multi-factor authentication (MFA) should be enabled where applicable. Auditing & Monitoring Partner teams are required to maintain access logs for all data-related activities and submit to periodic audits upon request. Dorena AI reserves the right to conduct internal compliance checks or request project-specific security audits at any time. Future Commitments All partner teams are expected to continuously improve their security practices and align with industry standards. Dorena AI encourages all vendors to work toward formal certification such as ISO 27001 where feasible.