Your data, and your clients', stays yours
Cognomine is built to be uploaded to by consultants handling other people's confidential block models. This page is the single source for how that data is kept separate, kept in Australia, protected, and removed when your entitlement ends.
Kept in Australia
Your data and results stay in Australia. They are not moved or processed offshore. For a consultant handling a client's confidential resource model, this is often the first question the client's security team asks, and the answer is that the data does not leave the country. This applies to uploads, solves, exports, and backups.
Separated by enterprise
Each customer's data is logically isolated within the platform. Your models and results are not visible to, or shared with, any other customer. When you share a result with a colleague or a client, you control who sees it and at what level of access: read-only with unlimited people, or full run access with up to two additional authorised users at once.
The full data, confidentiality and retention commitments are set out in our Terms of Service.
Deleted when your entitlement ends
We keep your data only for the term you have paid for. Your models and outputs are deleted or de-identified within 30 days after your entitlement ends, except where we are required by law to retain them or they remain in routine backup systems. We cannot restore data after deletion, so export what you need first. This is a deliberate protection. We are not a long-term store of your clients' confidential data, and we do not want to hold it a day past the point you need it.
How we handle personal information is set out in our Privacy Policy.
Encrypted in transit and at rest
Your data is encrypted while it moves to and from Cognomine and while it is stored. Access is limited to what is needed to run the service, and administrative access is logged.
Aligned to ISO 27001
The platform is built on a security program aligned to ISO 27001, covering access control, encryption, logging, and data lifecycle. We say aligned rather than certified because the audit is still ahead of us. Your own or client's security team may wish to conduct further review, which we are happy to support in full.
Before you upload
If your client's security team wants to review our controls before you upload their model, contact us and we will support that review. Answering those questions up front is faster for everyone than having the upload stall halfway.
