Security and Data Handling
Mapinator processes migration assessment data on behalf of AWS consulting partners — often including their end clients' infrastructure inventory. This page describes how that data is protected. The practices described here are in place today.
Tenant Isolation
Each organization's data is logically isolated with dedicated encryption keys and access controls. No data is ever shared or visible across tenants. A customer of one consulting partner cannot access data belonging to another partner or their clients.
Encryption
[CONFIRM: TLS 1.2+ for all data in transit. AES-256 encryption at rest across all storage layers — databases, object storage, and backups.]
Data Ownership
Customers own the data they upload and the deliverables generated from it. Mapinator processes customer data only to provide the service. Customer data is never used to train AI models. No third party can access customer data.
Infrastructure
Mapinator runs entirely on AWS using security best practices for network segmentation, identity management, and service configuration.
Access Controls
[CONFIRM: Internal access follows least-privilege principles. Multi-factor authentication is enforced for all staff with production access. All access events are audit-logged.]
Data Retention and Deletion
Customer data is deleted upon account termination within [CONFIRM: N days]. Data export is available on request prior to deletion.
Subprocessors
[CONFIRM: The following third-party services process customer data. This table is a placeholder pending final confirmation.]
| Service | Purpose |
|---|---|
| [Cloud provider] | [Infrastructure hosting] |
| [AI provider] | [Document analysis] |
| [Email provider] | [Transactional email] |
Reporting a Vulnerability
If you discover a security vulnerability, please report it responsibly. Do not disclose it publicly before we have had a chance to investigate and address it. Contact: [CONFIRM: security@mapinator.ai once mailbox exists].
Security Questionnaires
For security questionnaires or additional detail, contact us.
Contact us