Security and controlled access

Access to research systems

Aeviant grants each person access only to the non-public research and systems required for their current work and responsibilities.

Each person uses an individual account protected by multifactor authentication. Credentials are not shared.

Aeviant reviews access when responsibilities change and removes it when the work or engagement ends.

Sharing and publication

Before sharing confidential information outside the company, Aeviant identifies the recipient, the work the disclosure supports and the information required for that work. Aeviant shares only that information and documents the recipient’s confidentiality obligations before disclosure.

Before publication, Aeviant reviews scientific material for confidential or patent-sensitive information.

External software and AI services

Aeviant reviews an external software or AI service before using it for non-public research. The review covers whether the provider can access submitted information, how long it retains the information, how it may use the information and which account and sharing controls are available.

Aeviant does not place the research in the service if those terms or controls conflict with the restrictions on that research.

Security incidents

Aeviant identifies the person responsible for approving access to each restricted system and the person responsible for coordinating incident response.

If Aeviant suspects loss or misuse of non-public research or unauthorized access to an account or system, it limits further access to the affected information, account or system. Aeviant records the event and its response, investigates the cause and makes any notification required by law or agreement.