Data security: your logs and your code stay under your control
Celenisia was designed to pass a review by the IT and security teams of a large enterprise. The principle is simple: minimal, read-only access, on infrastructure hosted in France for data and applications, and in Europe for the AI. Your data is used only to deliver the service: it is never disclosed, integrated into other services or used to train AI, and your code and logs are never stored.
Four commitments
| Commitment | In practice |
|---|---|
| Hosting in France and in Europe | All data and applications are hosted in France. The AI is hosted in Europe. |
| Read-only access to code | Celenisia reads your GitHub, GitLab or Azure Repos repository with read-only access. It never changes your code: fixes are proposed to your developers, who decide. Source code is read only for the purposes of the service, namely debugging, and is never stored. |
| Limited access to logs | Logs are read where they already are: Azure, AWS, SFTP server or database. No agent is installed on your servers. You grant restricted, read-only access that you can revoke at any time. Logs are only read transiently: they are never saved to a database. |
| Use strictly limited to the service | Your logs and code are used only to deliver the service: detecting and debugging anomalies. They are never disclosed or used to train AI. They are processed in an isolated, restricted environment within our infrastructure. Only the list of detected anomalies is kept, to track fixes and detect regressions. |
Personal data and GDPR
Application logs may contain personal data. Aezan acts as a data processor and signs a data processing agreement compliant with Article 28 of the GDPR with each customer.
To go further, we offer a personal data cleansing service, deployed in your environment before any logs are transmitted. It removes in particular:
- first names and surnames;
- email and postal addresses;
- GPS coordinates;
- contract numbers and other identifiers.
What stays in your hands
You define the scope: the applications, environments and repositories Celenisia may read. You revoke access whenever you wish. No action is ever executed in your information system.