Contact us

Security and data control

Your data, under your control.

Subsurface data is among the most valuable assets a company owns. Your projects and archives are kept in the environment you choose. AI tasks travel over an encrypted channel to the GeoDeep data center, where they are processed, and every request is recorded in the audit log.

Request a pilot Get in touch
Hybrid model

Your environment

Your own servers or private cloud

  • Projects and interpretations
  • Data archive
  • Users and permissions

Encrypted channel

  • Only the data the task needs
  • Result, confidence level and explanation

GeoDeep data center

AI and heavy computation

  • AI models
  • Agents
  • GPU computing

Every request is recorded in the audit log

Operating models

Two operating models, the same safeguards.

  • GeoDeep Cloud

    The platform and your data are hosted in the GeoDeep data center, in an environment separate from those of other customers. We take care of installation, updates and maintenance.

  • Hybrid

    Projects and archives stay on your own servers or in your private cloud. The data a task needs is sent over an encrypted channel to the GeoDeep data center, where AI tasks and heavy computation run.

The same access rules, encryption and audit apply in both models. In the hybrid model, your team looks after the security of your own servers, and the contract sets out how responsibilities are shared. During the pilot, we work out together which model fits you best.

The path of an AI request

Every request can be traced from start to finish.

  1. Selects what is needed

    The platform selects only the data the task needs, for example the seismic volume under analysis rather than the whole archive.

  2. Encrypts and sends

    The data travels to the GeoDeep data center over an encrypted channel.

  3. Processes the task

    Models and agents carry out the task and return the result to your project with its confidence level and an explanation.

  4. Records the request

    The audit log records who sent the request, when, with which data and to which model.

Controls

Protection at every layer.

  • Access and permissions

    • Single sign on (SSO) with your corporate account, plus multifactor authentication
    • Access control based on roles and attributes
    • Rights at field, project and object level

  • Data protection

    • Encryption at rest and in transit
    • Secure management of encryption keys
    • Centralized management of passwords and access keys

  • Governance

    • Immutable audit log
    • Export approval and watermarking
    • Data loss prevention

  • Software integrity

    • Digitally signed update packages
    • Internal tracking of software components and licenses
    • Regular vulnerability scanning

  • Resilience

    • Network segmentation
    • Backup and disaster recovery
    • Immutable backups

AI security

AI that follows your rules.

  • AI requests are processed by models hosted in the GeoDeep data center
  • Data sent is limited to what the task needs and is encrypted in transit
  • Agents call only permitted tools, and every prompt and tool call is audited
  • Model artifacts are signed and checked for poisoning and tampering
  • Training data rights are recorded for every model
  • AI results are visually distinguished from human work

Our commitments

How we handle your data is written into the contract.

The principles below are set out in the contract and the data processing agreement we sign with you.

  • Your data belongs to you

    Ownership of your data stays with you.

  • Only for agreed purposes

    Your data is processed only for the purposes agreed in the contract, above all to carry out the tasks you send.

  • No training without consent

    Your data is not used to train shared models without your written consent.

  • Agreed retention period

    How long data sent for processing is kept, and how it is deleted, is defined in the contract.

  • No undisclosed third parties

    Except where the law requires it, your data is not passed to any third party that is not named in the contract or the data processing agreement.

  • Transparent audit

    You have access to the audit records for your data, so you can see which data was processed, when and for what purpose.

  • Known processing location

    The country and the data center where your data is processed are stated in the contract.

  • When our work together ends

    Your data is returned to you or deleted, as agreed.

This page is for general information. The specific rights and obligations of each party are set out in the signed contract and the data processing agreement, which take precedence over this page if there is any difference.

Frameworks

Built on the principles of recognized frameworks.

The GeoDeep security model follows the principles of these frameworks.

  • ISO/IEC 27001 Information security management
  • NIST AI RMF AI risk management
  • Zero Trust Architecture that trusts no one by default

Acceptance testing

Tested before it is trusted.

  • Penetration and privilege escalation tests
  • Export control and audit completeness checks
  • Backup restore drills
  • Checks of the encrypted channel and data transfer rules

Cases

Cases from this layer.

All cases

Pilot

Start with a pilot on your own data.

We set up a secure pilot environment for you and load one of your 3D surveys together with its wells. Your own experts then judge the results against the way you work today.

Request a pilot info@geodeep.ai