Security & Data

Your data.
Your control.

Metagens is built for sensitive financial data. Security, privacy and compliance are engineered into every layer of the platform — so you can operate with confidence and meet regulatory requirements.

Data stays with you. You own your data. We provide the platform — you control the data, access and policies.
Data ownership —You own your dataData isolationTenant isolationby designEncryptionIn transit & at restAccess controlRole-based accessAuditabilityFull audit & traceabilityComplianceRegulatory-readyarchitectureData residencyChoose your regionSecurity by design —Built-in at every layerMonitoringContinuous monitoring& alertsBusiness continuityResilient & reliableoperations
01

Your data remains yours

Metagens does not take data ownership.
We deliver the platform, you control your data.

  • You own and control your data
  • You choose where your data resides
  • We host the platform, you host the data
  • Data shared via secure APIs only
  • No customer data is used for any other purpose
Data ownership and flow
Your DataYour ownershipYour policiesYour controlmetagens.aiPlatformWe provide the platformYou control the dataYour BusinessYour decisionsYour operationsYour outcomesSecure APIsEncryptedconnectionsOutputs & insightsResults & reports
No data is stored, used or shared beyond your environment and approved integrations.
02

Security by design

Security is built into the platform architecture, not added on. Multiple layers protect your data, systems and users.

Network security

VPC, firewalls, security groups and network segmentation.

Authentication & access

SSO support, MFA, RBAC with least privilege access.

Encryption

TLS 1.2+ in transit and AES-256 encryption at rest.

Data isolation

Tenant-level isolation for data, compute and storage.

Secure SDLC

Secure coding, code reviews, vulnerability scanning.

Monitoring & alerts

24/7 monitoring, alerts and automated responses.

03

Compliance and standards

Metagens follows industry best practices and supports compliance with global regulatory frameworks.

SOC 2
Type II

Controls for security, availability and confidentiality

ISO 27001

Information Security Management (Framework aligned)

GDPR

Data protection and privacy by design

PCI DSS

Payment data security standards (For card data)

OWASP
Top 10

Application security best practices

Regulatory
Ready

Built to support regional regulations

Compliance coverage may vary based on deployment model and customer requirements.
04

Data residency and control

You can choose the region that meets your regulatory and business needs.

  • Choose region during deployment
  • Data stays in your selected region
  • Regional backups and DR
  • Cross-region replication (optional)
  • Complete control over data lifecycle
  • US (N. Virginia)
  • Europe (Frankfurt)
  • Asia (Singapore)
  • Australia (Sydney)
  • India (Mumbai)
Additional regions available on request.
05

Auditability and transparency

Every action and change is recorded. You get complete visibility, traceability and control.

  • Immutable audit logs
  • User activity and admin actions
  • Configuration change tracking
  • Data access and export logs
  • Reports for compliance audits
Audit log snapshot
TimeUserActionResource
10:21:35admin@bank.comLOGIN_SUCCESSUser
10:24:11risk@bank.comVIEW_CASECase #12345
10:25:08systemDATA_EXPORTReport
10:26:42ops@bank.comCONFIG_UPDATEWorkflow
10:28:19systemAPI_ACCESSLoans API
View full audit logs
06

Business continuity

Metagens is built for reliability, resilience and continuous operations.

High availability

Multi-AZ deployment with automatic failover.

Backups

Automated backups with point-in-time recovery.

Disaster recovery

RPO / RTO based on agreed deployment model.

Resilient infrastructure

Designed for scale, performance and fault tolerance.

Incident response

Defined processes and playbooks for quick resolution.

Security is not a feature. It’s our foundation.

Let’s build your secure and compliant lending infrastructure.