Current security posture overviewUmbrella Forensics considers security, confidentiality, and controlled data handling to be core principles in the design of its technology and business operations. This page provides a high-level overview of the company's current security posture and platform direction.Wording disciplineUmbrella Forensics does not claim certified status unless such certification has been obtained. All compliance references below describe current posture direction and roadmap — not achieved certifications.
1. Security principles
Umbrella Forensics is building its products and operational processes around the following principles:—Least-necessary access
—Controlled data handling
—Traceability and auditability
—Confidentiality by design
—Security-aware product development
—Future compliance readiness for enterprise customers
2. Infrastructure and hosting direction
The underlying platform architecture for SENTRIX is designed around EU-focused hosting and controlled infrastructure principles. The intended model includes EU-based compute and storage, controlled secrets management, server-side processing logic, and traceable system actions.3. Data protection and access control
Umbrella Forensics aims to ensure that access to business and platform data is restricted to authorised individuals and controlled systems only. The platform direction includes case-scoped permissions, audit logging, and integrity-aware file handling.4. AI and model usage
Umbrella Forensics' platform direction is to use AI services in a controlled manner. AI inference is intended to rely on EU-hosted model endpoints where possible, and customer data is not intended to be used for model training.5. Compliance posture
Umbrella Forensics currently maintains internal GDPR-related documentation and is developing its security architecture with future enterprise compliance requirements in mind. The company's direction includes:—GDPR-aligned data handling
—SOC 2 readiness path
—ISO 27001 roadmap
—Future AI governance maturity aligned with emerging standards such as ISO 42001
6. Security incident handling
Umbrella Forensics intends to maintain internal processes for identifying, escalating, and responding to potential security and data protection incidents.This Security Policy will evolve as the platform, customer environment, and compliance posture mature.