Polestar Trust Center.
How we handle the data you share with us, and how HYDRA OS stays out of your control systems.
Architecture.
Assessments run on data files you export. For an assessment HYDRA OS does not connect to your plant network: there are no inbound or outbound connections, and nothing writes to your control system.
Continuous monitoring runs on your premises, read-only, with no inbound connections. We confirm air-gapped operation for your site during scoping.
Data handling in assessments.
- Every assessment runs under NDA.
- You send files through an encrypted transfer link, yours or ours. Files are processed on machines controlled by Polestar Technology and accessed only by named team members.
- Your data is not sent to third-party AI services and is not used for any other customer's work.
- Raw data you send us is deleted within 30 days of the final report. Where your contract allows us to use anonymised results in our validation work, only those anonymised, aggregated results are kept.
Engineering tool accounts.
The engineering tools work without an account. Signing in with Google is optional and lets you save calculations to "My projects". For signed-in users we store a profile, saved projects and a record of tool runs in Google Firebase (Firestore, EU multi-region). Each record is readable only by the account that created it.
Tool accounts are kept until you delete them. Deleting your account on the Account page permanently removes your profile and saved projects. Anonymised usage records containing no personal data are kept for product reliability, as described in the Privacy Notice.
Continuity.
-
Open formats
Results export in open formats, so your evidence stays usable in any tool.
-
Documented data model
The data model behind every report is documented.
-
Source-code escrow
Available on request as part of a commercial agreement.
Responsible disclosure.
If you believe you have found a security issue in our software or this website, write to security@polestartech.co. Our contact details are also published in security.txt.
Security documentation.
Architecture and security documentation is available to customers and prospective customers under NDA.