Security

On engagements

Every change passes through senior-engineer review at each gate of our agentic SDLC, including an adversarial review stage. Nothing reaches your environment unreviewed. We design for least-privilege access and auditable trade and data trails, and we integrate with your existing controls rather than working around them.

Your data

We do not ask for, and do not want, your production credentials, payment-card data, or sensitive personal data. Where an engagement requires access to systems or data, scope and handling are agreed in writing, kept to the minimum needed, and removed when the work is done.

Reporting an issue

If you believe you have found a security issue affecting Sumantic, email info@sumantic.ai with the details. We will acknowledge and investigate responsibly.

This page describes practice and intent, not a contractual commitment. Engagement-specific security terms are agreed in writing.