AEVORON/Security and trust
For security teams and chief engineers

Your data, your control, clear rules

An industrial customer needs to know where the data sits, who sees it and what happens when the link drops. It is set out plainly here, including what is still in progress.

Sheet 16 / 17
Principles

What is built into the architecture

Data stays in the country

A data centre in Tashkent or customer servers. Production data does not leave for foreign clouds.

Closed network and offline

Installation in the company network, Edge on site, buffering through outages.

Access and audit log

Role and object-based access, an activity log and change history.

AI under control

AI proposes, the engineer approves. The model can run entirely inside the customer's network.

Verifiable calculations

Model version, inputs and code reference behind every number. A report can be reproduced.

Open standards

OPC UA, WITSML, PRODML, AGS4, OSDU, IFC: data can be taken out and used in other systems.

Goals and status

Plain talk on certification

We only call something a certificate once it has been issued. For now these are goals, not issued documents.

IEC 62443

Goal: industrial control system security. Gateways and architecture are being built to this standard.

ISO/IEC 27001

Goal: an information security management system.

Encryption

We do not write our own cryptography. Where required we use certified components.

This website

How the site itself is protected

Strict content policy

The browser may run only this site's scripts. There are no third-party scripts or ad trackers.

HTTPS only

The connection is always encrypted, and pages cannot be embedded on another site.

Report a vulnerability

Found a problem? Write to info@aevoron.uz. Contacts are also in /.well-known/security.txt.

Will you sign an NDA?

Yes, before any data changes hands.

Can the system run with no external internet at all?

Yes, in the customer-server deployment with Edge on site.

Who owns the data and the models tuned on it?

The data belongs to the customer. Terms for tuned models are set out in the contract.

Next step

Need materials for your security team?

We will describe the architecture and data flows for your deployment option, under NDA if needed.