Platform Security for AI-Powered QA

TOPICS

Platform Security

The world's best manufacturers trust Elementary to improve quality, maximize yield, and gain valuable insights from real-time production quality data. We place customer trust at the heart of our operations and prioritize security by design as we strive to exceed our industry’s security expectations and standards.

How Elementary Secures Data

Elementary tackles security holistically. This includes our focus on third party verification, infrastructure, product design, software development practices, and people practices.

QUICK FACTS

Compliance

SOC 2 Type II Certification

Elementary annually completes the AICPA Service Organization Control (SOC) 2 Type II audit to confirm our information security practices, policies, procedures, and operations meet the SOC 2 standards for security. A copy of the report can be provided upon request.

Cloud Security Alliance (CSA) STAR

Elementary has completed the Cloud Security Alliance (CSA) Security, Trust, Assurance, and Risk (STAR) self assessment Consensus Assessments Initiative Questionnaire (CAIQ). We encourage customers to download and review the CAIQ document for a more detailed understanding of our security posture.

Industry Standards Alignment

Our security program is built on industry-recognized frameworks and standards:

NIST Cybersecurity Framework
OWASP Security Guidelines
CIS Benchmarks for system hardening

View STAR Registry Listing for Prism

CERTIFICATIONS

Infrastructure

Elementary utilizes a shared responsibility model with Amazon Web Services (AWS), the industry-leading cloud provider. AWS provides "Security of the Cloud," while Elementary ensures "Security in the Cloud" through comprehensive technical and operational controls.

Cloud Architecture & Security

Our secure cloud infrastructure includes:

Enterprise-grade AWS infrastructure with high availability, redundant systems, and multi-region deployment
Continuous monitoring with automated threat detection, vulnerability scanning, and patch management

Security Controls & Management

We maintain strict security through:

Advanced network security including encryption in transit, communication restrictions, and OS hardening per CIS Benchmarks
Segmented environments with controlled access, regular security assessments, and comprehensive logging

View AWS Shared Responsibility Model

SPECS

Data

Elementary prioritizes data security through every stage of the data lifecycle, from collection through processing to storage. Our comprehensive data protection strategy leverages AWS's secure infrastructure while implementing our own rigorous security controls.

Data at-rest and in-transit are cryptographically protected using industry standards. When data is transmitted from the on-premise edge device to the cloud, it is encrypted in transit using TLS 1.2 or above with strong ciphers and key lengths. We regularly review and adjust TLS security policies. When data is then stored in the cloud, it is protected with server-side encryption (using 256-bit AES-GCM).

Data is processed by VMS that are part of the AWS Nitro System, which provides a secure multi-tenant system.

Data is erased in accordance with NIST 800-88. Elementary maintains data retention policies and ensures that applicable data is deleted in the event of customer subscription end.

Storage & Protection

Enterprise-grade AWS data centers with physical and digital security controls
Server-side encryption using 256-bit AES-GCM standard
Secure multi-tenant system using AWS Nitro System
NIST 800-88 compliant data erasure protocols
Minimal personal data collection and storage

Transfer & Processing

TLS 1.2 or above encryption for all data in transit
Segmented environments with controlled access, regular security assessments, and comprehensive logging
Strong cipher suites and key lengths
Regular review and updates of security policies
Secure API endpoints and communication channels
Continuous monitoring of data transfers
Regular security audits and compliance checks

Data protection in Amazon EC2

The Security Design of the AWS Nitro System

DATA PROTECTION

People

Elementary recognizes that people are fundamental to maintaining strong security. We foster a culture of security through comprehensive training, strict protocols, and continuous education for all team members.

To ensure all Elementary staff have the necessary security mindset, all staff undergo cybersecurity awareness training during onboarding and then on a recurring basis. Similarly, all developers undergo secure coding training.

Security Culture & Training

Comprehensive cybersecurity awareness training at onboarding
Regular security education and refresher courses
Regular security updates and communications
Security-first approach in daily operations
Background checks and required non-disclosure agreements
Access control based on role and necessity

Security Culture

Product

Elementary implements security by design throughout our entire software development lifecycle (SDLC). Our development processes prioritize security at every stage, from initial design through deployment and maintenance.

Application Testing includes both static and dynamic security testing (SAST/DAST), vulnerability management, third party penetration tests, and more.

Development & Security

NIST 800-218 compliant development practices
Comprehensive architectural security reviews
Automated security checks in CI/CD pipeline
Regular threat modeling assessments
Strict change management protocols

Testing & Validation

Static and dynamic security testing (SAST/DAST)
Third-party penetration testing
Regular vulnerability scanning
Continuous security monitoring
Risk management aligned with NIST RMF

PRODUCT STANDARDS

Learn More

Elementary maintains a customer support portal where customers can submit support requests, view release notes, access a knowledge base, and more.

This information provides a high level overview of Elementary’s security posture. For more about Elementary Security, we recommend reviewing our STAR registry entry, SOC 2 Type II report, and contacting us via our support portal.

Visit the Elementary Support Portal

Vision Inspection
Made Easy

Presence/Absence

Ensure every component is where it should be. Meticulously verify the presence or absence of parts, labels, and other critical elements in your production line.

Barcode

Streamline your tracking and inventory management. Reads and decode barcodes on your products, ensuring accurate tracking throughout the manufacturing and distribution process.

OCR

Go beyond traditional text verification. Read and authenticate any type of text and ensure your product labeling and text-based components are error-free and aligned with specifications.

Defect Detection

Spot even the rarest anomalies effortlessly. Replicate human precision but with the unmatched consistency of automation, ensuring that infrequent defects don't go unnoticed.

Match

Efficiently categorize images with precision. Classify images based on custom labels, ensuring each item is correctly identified and sorted according to your specific requirements.

Let's chat

Unlock
Hidden Value With AI