Security & Data Integrity

What's in Place Todayand What's Still Ahead

Pylot is a discovery and early-development tool. It has not been validated for GxP use, and we don't claim 21 CFR Part 11 or EMA Annex 11 compliance. Below is what the platform does today to keep records attributable and reproducible, and what's still on the roadmap.

Data Integrity Controls

How the platform keeps actions attributable, traceable, and reproducible

Electronic Signatures

Signature and approval workflows tied to authenticated users

  • Unique user identification
  • Authentication-backed signature actions
  • Signature intent and attribution captured in records
  • Approval workflows (where applicable)
  • Policy-driven access to signature actions

Audit Trails

Designed for audit logging and change history across key actions

  • Computer-generated timestamps
  • User identification tracking
  • Reason-for-change capture (where applicable)
  • Before/after value recording (where applicable)
  • Secure audit log retention

Data Integrity

Designed to support ALCOA+ aligned recordkeeping and traceability

  • Attributable actions and ownership
  • Legible records and consistent formatting
  • Time-stamped event history
  • Versioned models and results
  • Reproducible simulation runs

Access Controls

Designed for role-based access control with least-privilege permissions

  • Role-based permissions
  • Session management
  • Administrative controls
  • Least-privilege by default
  • Account lifecycle management

Data Security

Designed for encryption at rest and in transit with secure operations

  • Encryption at rest
  • Encryption in transit
  • Backup and recovery procedures
  • Secure key management
  • Access logging and monitoring

Retention & Archival

Designed for retention policies and archival/export support (roadmap)

  • Configurable retention periods (roadmap)
  • Export and archival workflows (roadmap)
  • Data restoration procedures
  • Deprovisioning and deletion workflows
  • Deletion verification (where applicable)

Infrastructure Security

Current controls plus roadmap items (marked Future)

Infrastructure Security

  • Cloud-hosted deploymentCurrent
  • Environment-specific hosting controls and SLAsFuture
  • Automated failoverFuture
  • Disaster recovery planningFuture

Network Security

  • Encrypted traffic in transitCurrent
  • Web Application FirewallFuture
  • DDoS protectionFuture
  • VPN / private networking optionsFuture

Monitoring & Response

  • Application monitoring and loggingCurrent
  • 24/7 security monitoringFuture
  • Vulnerability scanning programFuture
  • Penetration testingFuture

Have a Security Question?

If your use case has regulatory requirements, tell us what they are. We'll be straight about what the platform supports today and what it doesn't.