GMI runs on managed cloud services and inherits their security controls. This page describes what those controls are and what GMI has not yet done, so the distinction is visible rather than implied.
Data is encrypted in transit and at rest through the managed services GMI uses. TLS is terminated by the hosting provider; encryption at rest is provided by the managed database services. Authentication is handled by a third-party identity provider. These are provider controls, not controls GMI implements.
GMI has no scheduled third-party security assessment, no formal role-based access model configured, and no completed certification. The security program is designed toward ISO/IEC 27001:2022 alignment. GMI is not certified. Statuses below are targets, not attainments.
To report a security vulnerability, contact security@globalmaterialsintelligence.com