Your process data stays yours.

Every Niobia account, including Starter and Student, is encrypted. Data in transit is protected with TLS 1.3, and data at rest is encrypted with AES-256.

These plans run on shared-cloud infrastructure on Google Cloud Platform, in US regions. They inherit default encryption at rest, physically secured data centers with layered access controls, and encrypted traffic between services. Each user and workspace is logically isolated from every other.

On these plans, Niobia uses your data to improve the performance of its agents for everyone on the platform, and to operate, secure, support and troubleshoot the shared service. Your data is never shared with frontier models, and third-party model providers are not permitted to train on it.

Everything in Starter and Student, plus controls for teams handling sensitive R&D and production data.

• Organization structure, roles and permissions enforce least-privilege access. People see what their team needs.
• Single sign-on, and multi-factor authentication.
• Audit logs record who accessed what data, and when.
• Organizations are logically isolated from one another on the shared platform.
• Only usage data is tracked, and it is used to improve model and platform performance. Your data is never shared with frontier models.

For export-controlled materials, proprietary processes, or data under strict regulatory requirements. Your tenant runs on dedicated, isolated infrastructure. No compute or storage is shared with any other customer.

• Geographic isolation. Your data is stored and processed only in the region you specify.
• You hold the encryption keys for your tenant.
• Choice of open-weight models. Run on open-weight models so proprietary data never reaches a model provider.
• No data tracked. No data from your tenant is tracked or used to train any model.

Niobia runs as a workload inside your existing cloud or data platform, such as Databricks or Snowflake. Data stays in that environment unless you choose otherwise.

• Your access policies, including role, attribute or row-level controls where your platform supports them.
• Your network boundaries, so traffic follows your approved architecture.
• Your encryption and key management, where your platform supports it.
• No data is tracked or used to train any model.
• Edge AI is also available on its own through Custom, without the rest of the platform.

Niobia Edge runs on a computer on your floor, connected directly to your process, test and metrology equipment.

• Inside your firewall. Process data never leaves the building. No internet connection is needed.
• Open-weight models. The process engineering AI is fine-tuned on open-weight models and runs locally, so data never reaches a model provider.
• A person approves every fix. Edge recommends; your engineer makes the final decision. Corrections are written back to the tool only after approval, and every write is confirmed.

• Customer data is never shared with frontier models. Third-party AI providers are not permitted to train on it, and we minimize retention and use no-retention settings where the provider contract and configuration support them.
• On Starter and Student, Niobia uses data to improve the performance of its agents for everyone on the platform, and to operate, secure, support and troubleshoot the shared service.
• On Professional, only usage data is tracked, and it is used to improve model and platform performance.
• On Dedicated tenant and Custom, no data is tracked or used to train any model.
• Niobia personnel access customer data only to operate, secure, support and improve the service, on a least-privilege, need-to-know basis.

Identity and access. Multi-factor authentication on all plans, required on enterprise plans. Role-based access control enforces least privilege. Single sign-on on Professional and above.

Network and encryption. TLS 1.3 in transit and AES-256 at rest everywhere. Enterprise plans support private networking, where traffic never crosses the public internet, and customer-held keys.

Monitoring and logging. Audit logs capture user activity, data access and configuration changes. Infrastructure monitoring detects anomalous behavior and raises alerts. Log retention is configurable on enterprise plans.

Secure development. Mandatory code review, automated static analysis, dependency scanning and pre-deployment security checks.

Niobia is an early-stage company. We do not yet hold third-party certifications such as SOC 2 Type II or ISO 27001. Our security and privacy practices are designed to meet common enterprise requirements, and we support due diligence through security questionnaires and architecture reviews.

We support reasonable requests for access, deletion and data handling under applicable privacy laws, such as CCPA and CPRA, and GDPR obligations through customer agreements. If you need specific attestations, a Data Processing Addendum or contractual security commitments, write to info@niobia.ai and we will set out what we can provide today and what is on our roadmap.

• Detection and containment. Automated monitoring detects anomalies. The security team triages and contains incidents within hours.
• Investigation. Root cause analysis with a full audit-trail review. Affected systems are isolated and analyzed.
• Notification. Affected customers are told promptly, with scope, impact and remediation. Enterprise customers get a dedicated channel.
• Remediation and review. Fixes are deployed and verified, followed by a post-incident review to prevent recurrence.