Security & compliance
for production AI

ozDNA is vertical AI infrastructure — gateway, model router, RAG layer, and cost engine — operated by Findbelow Ventures. Security is built into the platform architecture: authenticated API access, rate limits, audit trails, and least-privilege defaults. Technical details: Security page.

• Private beta with invite-only API keys (ozdna_sk_test_ / ozdna_sk_live_)
• Per-request authentication at the AI gateway before any inference
• Segment-level detect API — no detection-evasion or humanization endpoints
• Production discipline validated on live workloads at TezMakale

Marketing and documentation are served via Netlify CDN with HTTPS enforced. Platform API runs on containerized infrastructure with environment-separated sandbox and production endpoints.

All customer-facing endpoints require HTTPS. API keys are stored as salted hashes — raw keys are shown once at creation and never persisted in plaintext. See Encryption at Rest and Encryption in Transit.

• In transit: TLS for ozdna.com, API endpoints, and provider connections
• At rest: Provider-native encryption for database and object storage (production migration)
• Secrets: Environment-scoped configuration — no secrets in client-side code or public repos

ozDNA processes text submitted to the detect API and metadata required for billing, routing, and audit. We minimize retention and design for vertical modes (academic, legal, financial) with different sensitivity profiles.

• Data minimization — only fields required for the requested workflow
• Retention policies per corpus and workflow — configurable for enterprise
• Subprocessor transparency — documented in DPA (draft in progress)
• KVKK and GDPR alignment prioritized for ComplyDNA customers

Access to ozDNA platform resources is scoped by organization, project, and API key. Enterprise roadmap includes SSO, RBAC, and environment isolation.

Every authenticated API request passes through the ozDNA gateway with request ID tracing. The observability module records audit events for authentication, RAG operations, and compliance workflows.

• X-Request-Id on all API responses for trace correlation
• Prompt hash and model ID captured per inference for reproducibility
• RAG ingest, retrieve, and eval events logged with org scope
• Exportable audit logs for enterprise — In Progress

Findbelow Ventures maintains an incident response process for security events affecting ozDNA infrastructure and customer data.

• Report vulnerabilities: security@ozdna.com · Responsible disclosure policy · security.txt
• Triage within 24 business hours for critical reports
• Customer notification for confirmed data-impact incidents
• Post-incident review and remediation tracking

Production roadmap includes automated backups, multi-region failover for the API gateway, and defined recovery time objectives (RTO) and recovery point objectives (RPO) for enterprise customers.

ozDNA is designed for production vertical AI workloads where downtime directly impacts customer revenue. Business continuity planning covers provider failover, model routing fallbacks, and cost-engine degradation modes.

• Model router fallback chains — primary and secondary model per workflow
• Provider outage handling via configurable routing rules
• Status page for platform availability — /status
• BCP documentation for enterprise procurement — Planned

We publish our compliance program status honestly. Timelines shift based on customer demand and audit readiness — contact us for current estimates.

ozDNA is operated by Findbelow Ventures. References to SOC 2, ISO 27001, GDPR, KVKK, or AI governance frameworks describe program status — not completed certifications unless explicitly stated otherwise.