Confidence comes from evidence.
Bring your security, architecture, privacy, and procurement questions into one review. Understand the controls, the deployment boundary, and the commitments for your workload.
Identity and access
Review workspace boundaries, single sign-on, role permissions, and the row and column controls required by your workload.
Request an access-control walkthrough using your proposed roles and datasets.
Encryption and secrets
Stored secrets use envelope encryption. Review transport security, key ownership, and rotation responsibilities for each connection and deployment.
Request the key-management design and verify the transport settings for your selected sources.
Audit and governance
Keep policy decisions, ownership, and activity evidence connected to the workflows they govern.
Review a representative access event, its evidence, and the retention policy with your control owner.
Privacy and data handling
Review the purposes of processing, deletion process, subprocessors, and contractual responsibilities before onboarding personal data.
Use the privacy policy and DPA as the starting point for your legal review.
AI and human oversight
Agree which models may process your data, what context is sent, how outputs are reviewed, and who may authorize an action.
Confirm provider-specific retention and training terms for the selected model configuration during the review.
Operations and recovery
Agree service objectives, escalation ownership, backups, and recovery acceptance criteria for the production workload.
Request the operational runbook and validate recovery expectations against the contracted service scope.
Agree the boundary before moving the data.
Review managed cloud, customer-cloud, or jurisdiction-bound deployment requirements with the team. Region availability and service commitments are confirmed in the deployment proposal and contract.
Prepare a complete evaluation.
Use this checklist with your technical, legal, and business owners. Request the applicable security evidence and deployment documents directly from the Genedata team.