Security Statement

01 —Scope

This page describes security controls that are evidenced in the current Deep Serena® production architecture. It is not a certification statement and does not claim absolute security or compliance beyond what has been independently demonstrated.

02 —Production Infrastructure

The current production service uses Scaleway infrastructure within the European Union. The production Serverless Container and PostgreSQL database are deployed in Amsterdam, Netherlands (nl-ams). Deployment container images are stored in Scaleway Container Registry in Paris, France (fr-par).

03 —Verified Controls

• HTTPS/TLS is enforced for the production web service.
• The production PostgreSQL service uses encryption at rest.
• Sensitive runtime values are configured as protected server-side secrets rather than public client-side variables.
• The Request a Demo API enforces an explicit origin allowlist and same-origin browser request checks.
• The Request a Demo API applies server-side validation, payload limits, duplicate suppression, rate limiting and structured logging designed not to include submitted personal data.

04 —Claims Not Made

Deep Serena® does not use this page to claim France-only hosting, zero-trust certification, end-to-end encryption, high availability, validated backup restoration, SecNumCloud qualification, ISO certification, or any other security certification that has not been specifically demonstrated for the Deep Serena® service.

05 —Sensitive Information

Public website forms must not be used to submit classified, export-controlled, security-sensitive, or confidential operational information. Security controls and this statement will be updated when the verified production architecture materially changes.