Security & governance

Evidence preserved. Actions governed.

Eterna combines technical controls with human review so protection work remains authorized, traceable and proportionate.

Identity and authorization

Identity, authority and protected assets are established before protection workflows are activated.

Access control

Client records are separated by account and role-based access governs sensitive operational views.

Evidence preservation

Relevant URLs, timestamps, source context and supporting material can be retained in case history.

Human review

Automated signals do not establish wrongdoing. Reviewers assess context, evidence and eligibility before consequential action.

Auditable history

Case and enforcement workflows preserve status history so decisions can be traced and reviewed.

Fail-closed enforcement

Authorization, evidence, route verification, approval, allowlist and operating controls must align before eligible submissions proceed.

Operational governance

Protection is a controlled process.

Retention and handling are scoped to the protection purpose, client authorization and applicable service requirements. Sensitive information is limited to authorized operational use.

Service providers are assessed for the function they support. Incident concerns can be raised directly with Eterna for triage and response.

Responsible disclosure

Found a security issue? Tell us directly.

If you believe you've found a vulnerability in Eterna's platform, report it to us directly before disclosing it publicly. Eterna investigates good-faith reports and will acknowledge receipt.

Please do not access, modify or exfiltrate client or case data, and avoid testing that could degrade service for others. Include enough detail to reproduce the issue.

legal@protectbyeterna.com