Security

The Terzi Weather Platform is in development. This page describes the security principles we are building to, not a certification or a description of a live production system. We will replace it with a fuller account before the platform opens.

We hold no certifications at this stage and make no claim to any.

This site is served over HTTPS. It holds no user accounts, no payment details and no uploaded data. The only personal data it handles is what you choose to send us through the contact form, which is covered by our Privacy Policy.

Two commitments shape the architecture of the platform.

A data owner should be able to have a model trained on their records without those records being exposed to the person who wrote the model. A model builder should be able to earn from their algorithm without handing the code to anyone, including us.

To do that, we are designing the platform so that models run inside isolated execution environments: the data is available to the computation but not to the people on either side of it, and only the agreed outputs leave the environment. Access will be granted on a least-privilege basis, and data will be encrypted in transit and at rest.

We will not sell data entrusted to the platform, and we will not use it for any purpose its owner has not agreed to.

If you believe you have found a security problem in this website, please tell us through the contact form rather than disclosing it publicly, and give us a reasonable opportunity to fix it. We will not pursue action against anyone who reports a genuine issue in good faith and does not access, alter or destroy data in the course of finding it.