Security

Security at ZeroHive

Security is not an afterthought at ZeroHive — it is the foundation on which every feature, deployment, and integration is built. We believe enterprise software should be secure by design, not bolted on later.

Infrastructure Security

ZeroHive is designed from the ground up for on-premise and private cloud deployments. Your applications, data, and AI models never leave your infrastructure.

  • On-Premise & Private VPC: Deploy the entire ZeroHive platform within your own data centres or private cloud environments. Full support for AWS, Azure, GCP private subnets, and bare-metal installations.
  • Air-Gap Support: ZeroHive operates with zero external dependencies. Fully air-gapped environments are supported for organisations with the strictest network isolation requirements.
  • Network Isolation: All inter-service communication is encrypted with TLS 1.3. Network policies enforce strict micro-segmentation between workloads.
  • Infrastructure as Code: All deployments are managed through version-controlled, auditable infrastructure configurations with immutable infrastructure patterns.

Data Protection

Your data is your most valuable asset. ZeroHive ensures it stays within your defined boundaries at every stage — from ingestion, through processing, to storage and retrieval.

  • Zero Data Leakage: No customer data is ever transmitted to external models, third-party APIs, or ZeroHive's own infrastructure. All AI processing occurs within your environment.
  • Encryption at Rest: All data at rest is encrypted using AES-256. Encryption keys are managed through your organisation's key management service (AWS KMS, Azure Key Vault, HashiCorp Vault, or equivalent).
  • Encryption in Transit: All data in transit is protected with TLS 1.3. Certificate management is automated through integration with your existing PKI infrastructure.
  • Private Data Models: AI models used by ZeroHive run entirely within your infrastructure. No model weights, training data, or inference results are shared externally.

Access Control

Every ZeroHive deployment comes with enterprise-grade access controls pre-configured. Authentication and authorisation are first-class features, not optional add-ons.

  • Role-Based Access Control (RBAC): Granular permissions are pre-configured in every generated application. Roles map directly to your existing Active Directory groups or identity provider.
  • Single Sign-On (SSO): Native integration with SAML 2.0 and OpenID Connect (OIDC). Supports Okta, Azure AD, Google Workspace, Ping Identity, and other enterprise identity providers.
  • Multi-Factor Authentication (MFA): MFA enforcement is available at the platform level, supporting TOTP, hardware keys (FIDO2/WebAuthn), and push-based authentication.
  • Session Management: Configurable session timeouts, concurrent session limits, and automatic session invalidation on role changes.

Audit & Monitoring

Complete visibility into every action taken within the platform. ZeroHive provides a comprehensive, tamper-evident audit trail that meets the requirements of the most rigorous compliance frameworks.

  • Complete Audit Trail: Every user action, system event, and data access is logged with timestamps, user identity, source IP, and contextual metadata. Logs are immutable and queryable.
  • Real-Time Monitoring: Built-in dashboards and alerting for security events. Integrates with your existing SIEM (Splunk, Elastic, Datadog, or equivalent) for centralised monitoring.
  • Anomaly Detection: AI-powered anomaly detection flags unusual access patterns, privilege escalations, and data exfiltration attempts in real time.
  • Compliance Reporting: One-click generation of audit reports formatted for SOC2, ISO 27001, and HIPAA compliance audits.

Compliance Certifications

ZeroHive architectures are pre-configured to meet the strictest global compliance standards. Compliance is baked in from day one — not an afterthought.

SOC2 Type II

Annual third-party audits verify our controls for security, availability, processing integrity, confidentiality, and privacy. Reports available under NDA.

ISO 27001

Certified information security management system covering all aspects of the ZeroHive platform lifecycle, from development through deployment and operations.

HIPAA

Full support for protected health information (PHI) handling. Business Associate Agreements (BAA) available. Technical safeguards are pre-configured in healthcare blueprints.

GDPR

Data processing agreements, data subject access request workflows, and right-to-erasure capabilities are built into the platform. Data residency controls ensure data stays in your jurisdiction.

AI ISO 42001

Certified AI management system ensuring responsible development, deployment, and monitoring of AI capabilities within the ZeroHive platform.

Country-Specific DPLs

Architectures adhere to the respective data protection laws of each country where your organisation operates, including CCPA, PIPEDA, LGPD, and PDPA.

Responsible AI

ZeroHive is committed to the responsible development and deployment of AI. Our platform incorporates governance mechanisms that ensure AI capabilities are transparent, fair, and accountable.

  • Model Governance: All AI models deployed through ZeroHive are versioned, auditable, and subject to approval workflows before promotion to production.
  • Bias Monitoring: Continuous monitoring for model drift and output bias, with automated alerts and human-in-the-loop review processes.
  • Explainability: Generated applications include transparency features that allow end-users to understand how AI-driven decisions are made.
  • Human Oversight: Critical AI-driven workflows include configurable human approval gates to ensure appropriate oversight before automated actions are executed.