DataByte
Security & trust

Security is architecture, not configuration.

Every module inherits the same RBAC, the same audit trail, and the same catalog. You don't harden DataByte, DataByte ships hardened.

Security model

Three enforcement layers. No gaps between them.

Platform layer

Enterprise RBAC and unified administration.

  • Role-based access control
  • User and group management
  • SSO (SAML 2.0, OIDC)
  • Session management
  • Administrative audit trail
Module layer

Per-module access controls and approval workflows.

  • API approval workflows
  • Pipeline access control
  • Model deployment gates
  • Module-scoped audit trail
Data layer

Row- and column-level security with PII intelligence.

  • Row-level security
  • Column-level security
  • Automated PII tagging
  • T1–T5 data classification
  • Cross-module lineage
Operational controls

What happens to data in transit and at rest.

Encryption

TLS 1.2+ for data in transit. AES-256 for data at rest. Customer-managed keys (KMS) available on Business and Enterprise tiers.

Data residency

Choose US, EU, APAC, or on-prem deployment. Data never leaves the chosen region without an explicit export action, logged in the audit trail.

Backups & recovery

Configuration and metadata backed up continuously. RPO and RTO targets documented per tier; DR runbooks tested quarterly on Enterprise.

Sub-processors

Public sub-processor list maintained; customers notified 30 days before material changes. Contractual flow-down of security terms.

Compliance by design

SMART is why audits become reports, not projects.

The same five primitives that run governance across every module are what compliance officers rely on at audit time. No retrofit; no sprint of tagging.

SMART frameworkFive SMART primitives, SLA, Monitoring, Actions, Rules, Traceability, arranged around a central governed platform core.DataByteGoverned coreSSLA1MMonitoring2AActions3RRules4TTraceability5
S
SLA

Per-pipeline thresholds; alerted before breach, not after.

M
Monitoring

Continuous lifecycle monitoring across executions.

A
Actions

Automated responses: notify, retry, escalate, reroute.

R
Rules

Business and technical rules enforced at the platform level.

T
Traceability

Cross-module lineage and audit trail, source to consumer.

Your security team will ask specifics.

Book a review with our security engineer. We'll share the DPA, SOC 2 report (under NDA), sub-processor list, and pen-test summary.