Search Results

Short answer: System telemetry describes how software is behaving — which process started which, what memory looks like, whether execution patterns are anomalous. Customer data is the content your business creates and holds — files, emails, database records, c...

Does Cyber Crucible sell or share customer data with third parties?

Short answer: No. Cyber Crucible does not share, license, trade, or disclose customer information or telemetry to any third party, and customer data is strictly not for sale under any circumstances. The commitments Zero third-party sharing — no sharing, licen...

What can Cyber Crucible disclose if compelled by a government or court?

Short answer: Nothing in the categories that matter most, because it never holds them. Cyber Crucible does not harvest, store, or retain decryption keys, user credentials, or customer files — so there is nothing of that kind to produce to any private party, go...

How is Cyber Crucible data protected in transit?

Short answer: All agent-to-server communications enforce TLS 1.3. Operational data payloads additionally use JSON Web Encryption (JWE) with unique per-agent cryptographic key pairs, so payloads cannot be intercepted or manipulated in transit. Administrative ac...

Where is my data processed, and can it stay inside my country?

Short answer: Yes. Cyber Crucible infrastructure can be staged so processing occurs geographically close to or within your legal jurisdiction, and a fully on-premises air-gapped deployment keeps everything inside your own network boundary with zero outbound te...

What deployment models are available for data sovereignty?

Short answer: Two. A fully air-gapped on-premises model where nothing leaves your network, and a hosted or hybrid cloud-assisted model with JWE-encrypted TLS communications to regionally staged servers. Both provide the same sub-200-millisecond local preventio...

How does Cyber Crucible manage supply chain and insider risk?

Short answer: Through binding mutual NDAs for all personnel with potential access, strictly need-to-know administrative access limited to vetted staff, and a zero-tolerance mandate to isolate or immediately disengage any supplier, vendor, contractor, or employ...

Does Cyber Crucible embed third-party libraries or foreign code?

Short answer: No. Kernel sensors, drivers, and Genetic AI behavioral models are engineered in-house. No foreign state-sponsored SDKs, unverified third-party libraries, or hidden telemetry hooks are embedded in the software. Windows kernel drivers are submitted...

What does geopolitical neutrality mean in security software?

Short answer: It means the software is built to protect your organization without embedding foreign strategic backdoors, foreign state intelligence partnerships, or mandatory cloud dependencies — so using it does not import another country's strategic interest...

Regional Data Protection & Compliance

How Cyber Crucible supports data protection law across the Gulf, Africa, Europe, and beyond — controller and processor roles, cross-border transfers, data residency, sensitive data, and local representation.

Why do so many national data protection laws ask for the same things?

Short answer: Because most modern data protection laws are modelled on the same framework. Whether it is Saudi PDPL, UAE, Bahrain, Qatar, Oman, Kenya, Nigeria, South Africa, or the EU's GDPR, they converge on the same core demands — collect only what is necess...

Which Gulf countries have data protection laws, and how do they differ?

Short answer: Five of the six GCC states now have comprehensive data protection laws — Saudi Arabia, UAE, Bahrain, Qatar, and Oman. Kuwait is the exception, taking a sectoral approach instead. They differ mainly on consent strictness, localization preference, ...

How do African data protection laws affect security vendor selection?

Short answer: Most African jurisdictions restrict cross-border transfer, and several go further with hard data localization — Nigeria and Zambia require personal data to be stored in-country. That eliminates cloud-dependent security tools structurally, not con...

What applies in Europe and the UK?

Short answer: EU GDPR and UK GDPR, which track each other closely. The practical controls are the same; the main divergence is which instrument covers international transfers — EU SCCs versus the UK's IDTA or Addendum. The two regimes EU GDPR UK GDPR + DPA...

Is Cyber Crucible a data controller or a data processor?

Short answer: In most engagements Cyber Crucible acts as a data processor on behalf of the customer, who is the controller. The customer determines the purposes and means of processing; Cyber Crucible processes data only on the controller's documented instruct...

How are cross-border data transfers handled?

Short answer: Through the mechanism each jurisdiction recognizes — SDAIA-approved Standard Contractual Clauses for Saudi data, equivalent contractual safeguards elsewhere — backed by a completed Transfer Risk Assessment. Or avoided entirely, by deploying so th...

Does Cyber Crucible collect sensitive personal data?

Short answer: No. Cyber Crucible does not collect the categories these laws define as sensitive — biometric, health, or genetic data, or data revealing racial or ethnic origin, religious belief, or political opinion. Telemetry focuses on system behaviour and s...

What safeguards protect personal data processed by Cyber Crucible?

Short answer: Encryption in transit and at rest, pseudonymization of identifiers where feasible, role-based access control, key management with rotation, audit logging, and regular vulnerability scanning — backed by contractual terms in customer DPAs and an in...