Operational posture
Security & responsible use.
Before data transfer
For work involving sensitive, regulated, government, proprietary, or security-relevant information, handling requirements should be scoped before data is transferred. Relevant questions can include access control, data location, retention, deletion, encryption, authorized users, third-party services, and incident contacts.
Public contact channels
Do not send classified information, CUI, export-controlled technical data, PHI, secrets, production credentials, customer records, or proprietary datasets through unsolicited email. Establish an appropriate channel first.
Federated and privacy-aware ML
Topologica develops and uses federated methods, including Flower-based workflows, when distributed training or evaluation is a better fit than centralizing data. The privacy and security properties of any implementation depend on the actual architecture, threat model, protocol, configuration, and operating controls. Federated learning by itself is not a compliance or security certification.
Engineering posture
Where appropriate, Topologica favors least-privilege access, isolated environments, explicit dependencies, reproducible artifacts, versioned evidence, testable acceptance criteria, and human review for consequential decisions.
AI system claims
Performance claims should remain tied to their evaluation boundary. Training fit is not evidence of generalization. A demonstration is not certification. Research software is not automatically production-ready, clinically validated, or suitable for regulated use.
Certifications and government requirements
Topologica does not imply SOC 2, FedRAMP, FIPS, HIPAA, GxP, ISO certification, security clearance, Authority to Operate, or similar status merely by describing engineering practices. If an engagement requires a specific control framework, authorization, residency constraint, or contracting clause, that requirement must be established explicitly.
Responsible scope
Topologica may decline work where the requested objective, data handling, access pattern, or deployment context cannot be supported responsibly or lawfully.
Contact
Questions: contact@topologica.ai.