Cyber Space Initiative SRL

Security Overview

We take confidentiality and privacy seriously and handle client data on a need-to-know basis. We work in a GDPR-aware way and can sign NDAs / DPAs where required. Access to project data is limited to the people actively working on the task (typically founder-led delivery). Accounts are protected with strong credentials and MFA where available, and we keep permissions tight and project-specific. We aim to minimize data exposure. We only use the data required to complete the labeling/evaluation task and follow the client’s rules for sensitive fields (masking, redaction, exclusion, or restricted views). Data is accessed and transferred over secure connections (HTTPS/TLS). When a client provides an approved tool or workspace, we do the work there and avoid copying datasets outside that environment. Work is done on secured devices with encryption, automatic updates, and endpoint protection. For remote work, we use trusted networks and can use a VPN if the client requests it. Quality controls are built into the workflow: clear guidelines, review/QA passes, spot checks, and escalation for ambiguous cases. If needed, we can support gold sets and basic audit trails inside the chosen labeling platform. Retention follows the client’s policy. At project end, we return outputs and delete local copies and credentials as agreed, and we can confirm deletion on request.

Security Credentials