Security & Compliance¶
Whiteklay products are built for regulated, high-security environments. This page summarizes the security model shared across the platform and links to the detailed documentation for each product.
Security principles¶
| Principle | What it means |
|---|---|
| Zero trust | No user, agent, or service is trusted by default. Every request presents a verified identity and is evaluated against access rules. |
| Deny by default, deny wins | Explicit DENY rules always take precedence over ALLOW rules. |
| Least privilege | Access is granted per role, scoped down to datasets and individual columns. |
| Data stays inside your boundary | Products can run fully air-gapped, with no external data exfiltration. Customer records are not used for model training. |
| Everything is auditable | Access decisions and policy changes produce structured audit events that can be forwarded to your SIEM. |
Where to read more¶
Virtual Data Assistant (VDA)¶
- Zero-Trust Security & PBAC Engine: the policy grammar, evaluation algorithm, SQL firewall, and token security.
- Air-Gapped & Compliance Hardening: offline operation, container hardening, regulatory alignment, and audit logging.
- Access Control & PBAC Governance: managing role permissions and testing access rules.
- Scalability & Disaster Recovery: resilience and recovery design.
Reporting a security concern¶
If you believe you have found a vulnerability, do not post it publicly. See Support for how to reach us.