Security & Data Handling
Last updated: August 2026
Open, auditable by design
The Semantica core engine is MIT-licensed and fully open source. There is no closed binary, no obfuscated logic, and no hidden data path — every line that builds a context graph, traces a decision, or records provenance is readable on GitHub.
Open-source library
The Semantica Python library does not transmit any data to our servers. All graph computation runs locally within your own environment — your data, your infrastructure. No telemetry is collected from library users unless you explicitly configure an integration that does so.
This website
We collect minimal analytics and standard server logs — see the full breakdown in our Privacy Policy. We don't sell or share this data with third parties.
Enterprise deployments
Semantica has no managed cloud offering, and no plans to build one — every deployment runs on infrastructure you control, whether that's a Pilot / Design Partner engagement or a full Enterprise Forward Deployment on-premise or in your own VPC. Encryption at rest and in transit, VPC isolation, full audit trails, and SOC 2 readiness are things we help you configure in your own environment, not certifications held by a service we operate.
Reporting a vulnerability
Found a security issue? Please report it privately rather than filing a public GitHub issue — email kaif@getsemantica.ai with details and, if possible, steps to reproduce. We aim to acknowledge reports promptly and will credit responsible disclosures unless you prefer to stay anonymous.