Security

We design and operate our platform with enterprise-grade security in mind.

We are currently preparing for SOC 2 Type II and ISO 27001 certification. As a European AI platform, we design our security controls in alignment with GDPR, NIS2, and the EU AI Act requirements.

Infrastructure

We host our platform and all services within the European Union. Our primary infrastructure is located in GLBNXT-managed data centers in the Netherlands. We use carefully selected EU-based third-party hosting providers* to offer geo-redundant alternatives and resilience.

We always offer fully sovereign deployment options on dedicated GLBNXT-managed infrastructure with no data transfer outside controlled environments unless explicitly agreed.

Access & Authentication

We provide customers options for Single Sign-On via SAML, OpenID or OAuth2.

Our platform provides role-based access control for all administrative and user functions. Where possible this is extended to the services offered through the GLBNXT platform.

GLBNXT employees have mandatory multi-factor authentication enabled on all services. Customers or GLBNXT are highly recommended to enable multi-factor authentication for their employees.

Data Protection

We encrypt customer data in transit (TLS 1.3) and at rest (AES-256).

Customer data is not used by GLBNXT for training or fine-tuning models. For third-party model providers, GLBNXT explicitly requires these providers to disable training on data provided through the GLBNXT platform.

Backups & Recovery

• Automated daily backups with 14-day retention

• Recovery Point Objective (RPO): 72 hours

• Recovery Time Objective (RTO): 8 hours for critical services

• Regular backup restoration testing

Monitoring & Incident Response

GLBNXT uses automated continuous monitoring of system performance and scans for potential vulnerabilities.

Security incidents are investigated within 24 hours under our Security Response Policy. We maintain a responsible vulnerability disclosure program and welcome security researchers to report findings confidentially.

Audit logging is available for all platform activities with 90-day retention.

Vulnerability Management

We maintain a responsible vulnerability disclosure program and welcome security researchers to report findings confidentially to security@glbnxt.com. Reports are acknowledged within 48 hours and investigated according to severity.

We follow a risk-based patch management process:

• Critical vulnerabilities: patched within 7 days

• High-severity vulnerabilities: patched within 30 days

• Regular security updates: deployed monthly

Business Continuity

Our platform is designed for high availability with:

• Geo-redundant infrastructure across multiple EU locations

• Automated failover capabilities

• Regular disaster recovery practices (quarterly)

• Documented business continuity plan with defined escalation procedures

** All our external hosting providers are carefully reviewed in line with our sovereignty principles. Learn more about our Vendor Management.*