Security

Nikufra works with manufacturing environments where production data, operational continuity, and trust matter. Our security approach is based on controlled access, confidentiality, traceability, least privilege, and alignment with each customer's technical environment.

Nikufra projects may use customer-controlled infrastructure, cloud services, edge systems, or a combination of these environments. The exact architecture, network access, backups, monitoring, data boundaries, and operational responsibilities are agreed with the customer for each project.

• Access should be limited to authorized people who need it for the agreed work.
• Customer environments should use customer-approved access paths, such as VPNs, accounts, or supervised remote sessions.
• Where possible, privileged access should be temporary, traceable, and removable.
• Business tools should use account-level controls appropriate to their function.

Customer operational, production, quality, planning, maintenance, and system data is treated as confidential. Nikufra personnel may access customer data only where needed and authorized for the relevant project, support request, or service.

Nikufra's industrial AI tools are intended to support human teams, not replace operational responsibility. Where systems propose actions, customers should retain human review, validation, and accountability for decisions that affect production, quality, maintenance, delivery, safety, or people.

If Nikufra identifies a security issue affecting customer data processed by Nikufra, we will assess the issue, take reasonable containment steps, and notify affected customers as required by applicable law and contract.

Security in industrial environments is shared. Customers remain responsible for their own networks, identity systems, physical facilities, local backups, endpoint security, user permissions, and operational approval processes, unless otherwise agreed in writing.