Privacy and Security Commitment
Top lenders trust us with their data being processed by our product. At Prudent Al, we treat your data just like we treat our own: responsibly.
Privacy commitment
Prudent AI's approach to data privacy is straightforward: as a data processor we collect and process only what is essential for the functionality of our products and the delivery of our services. This stance is unchanging. We foster a privacy-conscious culture, underpinned by stringent security practices, to safeguard sensitive customer data across all aspects of our organization.
Security commitment
We recognize the immense responsibility that comes with being a custodian of customer data. Our multi-faceted security architecture, robust product delivery, and resilient service platform form the foundational pillars of our service delivery. These key tenets ensure that we meet and exceed the security expectations our customers rightly demand.
Behind the scenes
At Prudent AI, we rely on a layered security approach, a secure development process and a resilient platform. The three blocks will be Data Security, Secure Engineering, Cloud Native Resilient Architecture
Tiered Data Security
Our layered Approach to Data Security
Secure Product Build
Comprehensive Security Throughout the Product Lifecycle
Robust Cloud Architecture
Always On and Available for Your Business
Protecting your data
We recognize the importance of data. With our sturdy system of data safeguards in place, we enable you to concentrate on the data itself, leaving the security concerns to us.
Virtual Private Cloud
Our data is hosted in dedicated Virtual Private Clouds (VPCs) operating in non-promiscuous mode, further segmented to enhance security and manageability.
Encryption
Utilizing AES 256-bit encryption, we secure data at rest, and employ HTTPS with TLS 1.2 encryption for data in transit, maintaining the confidentiality and integrity of information.
Malware & Spam Protection
Our systems are safeguarded with up-to-the-minute malware and spam protection, supporting real-time scanning and security, guarding against the latest threat landscape.
Access Controls
We implement role-based access through Identity and Access Management (IAM), enforcing segregation of duties, two-factor authentication, and end-to-end audit trails. This ensures access aligns with the defined security context.
Perimeter security
We have established routing rules hardened based on pre-set criteria, governing permissible transactions across all resources, fortifying our system's boundaries.
Secure product build
Information security and data privacy are integral to every release cycle at Prudent AI, forming a core part of our product's blueprint considerations.
Code Review
Our Quality Assurance team rigorously tests all changes. Criteria are set for conducting code reviews, web vulnerability assessments, and advanced security tests to ensure robustness.
Quality Assurance
Every build undergoes stringent functionality tests, performance evaluations, stability analyses, and UX assessments before receiving the certification as "Good to go."
Version Control
Source code is managed centrally with meticulous version controls. Access is restricted to specific teams assigned to particular sprints, with detailed records maintained for code changes, check-ins, and check-outs.
Segregation of Duties
We enforce strict access restrictions to the production environment, limiting access to a select set of users based on job roles. Even developers and Quality Assurance team members have access tailored to their specific responsibilities, ensuring a secure and controlled work process.
Highly Resilient Architecture
Our architecture is purposefully constructed with resilience at its core, ensuring high availability for product and data.
Component Redundancy
Components are deployed in 'n+1' mode across various availability zones and actively configured behind a load-balancing service, enhancing reliability.
Quality Assurance
We intelligently route users to the optimal endpoint considering factors such as geo-proximity, latency, health, and other parameters.
Platform Load
Balancing
Our system automatically distributes application traffic across multiple availability zones, supporting high availability, auto-scaling, and robust security measures.
Real Time Data
Backup
We maintain near real-time backups in separate AWS Availability Zones, with daily Cloud Snapshots retained for the past seven days, ensuring data integrity.
Cross Region Redundancy
Mirrored Availability Zones are set up to serve customers in real-time, providing seamless Disaster Recovery (DR) capability and uninterrupted service.
Incident & Breach Management
We have established procedures for reporting and tracking incidents, enabling timely communication, investigation, and resolution of any security breaches.
Global CDN
Our geographically distributed network of proxy servers and data centers aims to provide service as close to end-users as possible, ensuring high availability and superior performance.
Security Operations
We maintain situational awareness through detection, containment, and remediation of any suspected or actual security incidents. Tactical rules and data sensors are in place to offer early warnings and alerts.
Capacity Management
With proactive capacity monitoring and on-demand expansion capabilities through our highly elastic hosting partners, we ensure that our systems are always ready to meet the demands of our users.
