Skip to main content

Security & privacy

Security​

All Tensor Energy products are secure and private by default. Security and privacy are priorities for the whole organization and throughout product development.

Our customers trust us with a large amount of data. We handle it with care, backed by internal security measures and security built into the product, so that you can be confident in how your data is collected, transported, and stored.

Internal security​

Data encryption​

Your data is encrypted at rest and protected by TLS in transit. We store secrets and other sensitive data in dedicated secrets management tools.

Best-practice product design​

We run security design reviews and threat modeling for our products, and monitor them for security events in real time. The source code of every product goes through several stages of vulnerability scanning before it reaches production.

Time-bound access​

Internal access to critical tools and resources is granted for a limited time only.

All employees must use multi-factor authentication with hardware security keys. We do not use IAM user keys, and our developers can access our cloud systems only through our federated identity provider.

Product security​

Authentication​

When you log in to Tensor Cloud, or open simulation results as an external user, Tensor Cloud verifies your identity with a magic link: a sign-in link sent to your email address and bound to it. Magic links are more secure than passwords and more convenient than methods such as hardware tokens.

You can also add passkeys to your account and sign in with your fingerprint, face, device PIN, or a hardware security key instead of waiting for an email. Signing in with a magic link always remains available.

If your company has specific authentication requirements, such as SSO or MFA, contact us and we will work with you on them.

Backups and disaster recovery​

We back up your data regularly and keep a disaster recovery plan so that we can restore it as quickly as possible after a disaster. Live data is stored in the AWS Tokyo region, and backups are kept in the Osaka region for redundancy.

Access control​

Separate your workspace administrators from regular users so that only administrators can invite new users, change roles, and manage API keys.

Privacy​

We protect your privacy as follows:

  • We collect only the data we need to run the platform safely and efficiently
  • We do not sell customer data
  • We restrict internal access to customer data on a least-privilege basis

Data residency​

All data in customer workspaces is stored in Japan, in AWS data centers that meet strict security requirements.

Related data, such as customer support tickets, company emails, and business development information, may be stored in secure data centers outside Japan.