Security and Trust

Planning runs on the data you guard hardest, from cost curves to supplier terms. DemandLabs gives your security team the controls to sign off.

Controls in the Architecture

Isolation and lineage are built into the platform, so they hold in each tenant. Directory sync and 24/7 support come with the Enterprise tier and above.

Identity and Access

Single sign-on and SCIM provisioning against your directory, with row-level permissions that follow the plan.

Tenant Isolation

Planning data is stored and processed in the region you pick at contract time, in a tenant of its own.

Model Isolation

Each customer's models train on that customer's data alone, so your demand history and supplier terms shape your forecasts only.

Audit and Lineage

Each action is logged and can be reversed. Any number traces back to its input and the person who moved it.

Agent Guardrails

Agents act inside the limits you set and escalate to a planner when judgment is needed.

Support

Enterprise and Autonomous tiers include 24/7 support.

The Path Your Data Takes

Data passes the same five stages each night. Each stage is instrumented, so the origin of any number is one query away.

D1

Ingest

  • Streaming ingest
  • Entity resolution
  • External signals
  • Data quality scoring
D2

Isolate

  • Dedicated tenant
  • Regional residency
  • Encrypted in transit
  • Encrypted at rest
D3

Model

  • Per-customer training
  • Backtests
  • Version lineage
D4

Decide

  • Guardrails
  • Approvals
  • Audit log
  • Reversible actions
D5

Publish

  • ERP write-back
  • REST and GraphQL
  • EDI and AS2
  • Scheduled exports

Your Tenant in Your Region

Pick US, EU or APAC residency at contract time. Models train in-region on your data only.

US

United States

Tenant data is stored and processed in-region, with support in US hours.

EU

European Union

Tenant data is stored and processed in-region under GDPR terms, with support in EU hours.

APAC

Asia Pacific

Tenant data is stored and processed in-region, with support in APAC hours.

Sub-processor Register

The register names each party that can touch tenant data, with its purpose and region. It ships with the security pack under NDA.

Security Pack

Ask for the security pack and the data processing terms at support@demandlabs.io.

Responsible AI

The policy covers how agents are governed and where autonomy stops.

Read the Responsible AI policy

Privacy

The privacy policy covers this website and the platform.

Read the privacy policy

Bring Your Security Team

A walkthrough of the controls with the people who built them.