Snapshot 16504

Document
Security page
URL
https://www.sinai.com/resources/security-practices
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
107147 bytes
SHA-256 (raw)
19361142143c7f01dd895f8665866ebb9250d66bdd14bb9c4ffa29592c7516df
SHA-256 (normalized text)
79bb205d4c295d305d26e4fffd125f06f9a20d5e8ad532f8108baafb74591ab1

Normalized text

Scripts and page chrome removed; this is what change detection compares.

REDUCE NOW: Finding Facility Projects That Pay Back.
Register now
Trust SINAI for Secure & Compliant Data Management
We employ strict architectural concepts, practices, and controls to protect customer data and the integrity of SINAI’s Decarbonization Intelligence Platform.
Talk To Us
SINAI Security Practices
SINAI has completed a SOC 2 Type 2 audit, confirming our adherence to one of the most stringent, industry-accepted compliance frameworks for service organizations.
This framework provides additional assurance to our customers, through an independent auditor, that our business process, information technology, and risk management controls are properly designed.
Audits
SINAI services undergo periodic and targeted security assessments by internal staff and external security firms who perform regular audits of the platform to verify that our security practices are sound.
Security Controls
SINAI actively maintains strict technical and organizational measures to protect customer data against accidental or unlawful destruction, loss, alteration, and unauthorized disclosure. These measures include, but are not limited to:
Access logging. All access to SINAI systems is logged and monitored for unauthorized activity.
Access Management. Access to SINAI systems is granted on a least-privilege basis and regularly monitored by automated systems and manual reviews.
Host Management. We perform automated vulnerability scans on our production hosts and remediate any findings that present a risk to our environment. We enforce screen locks and the use of full disk encryption for company laptops.
Network Protection. In addition to system monitoring and logging, we have implemented two-factor authentication for all server access across our production environment. Firewalls are configured according to industry best practices, using AWS security groups.
Product security practices. All new features and significant changes in functionality go through a security review process. All code is audited with automated static analysis software, tested, and peer-reviewed prior to being deployed to production.
Intrusion Detection
The SINAI platform employs automated detection measures and immediately alerts our security team to any potentially unauthorized intrusions.
Security Logs
All SINAI systems log activity in order to enable security reviews and analysis. These logs are analyzed for security events via automated monitoring software and any anomalies are promptly investigated by engineering security staff.
Incident Management
SINAI maintains security incident management policies and procedures with periodic tests and staff training exercises. SINAI will notify impacted customers without undue delay of any unauthorized disclosure of their respective Customer Data by SINAI or its agents of which SINAI becomes aware to the extent permitted by law.
Data Encryption
The SINAI platform uses industry-standard encryption products to protect Customer Data in transit and at rest.
Reliability, Backup & Business Continuity
SINAI is committed to providing a highly available and reliable service. Our staff tests disaster recovery measures regularly and has a 24-hour on-call team to quickly resolve unexpected incidents. SINAI performs regular backups, facilitates rollbacks of software and system changes when necessary, and replication of data as needed.
Deletion of Customer Data
SINAI will, following a contractual termination, delete, and ensure that all of its Affiliates and applicable third party hosting providers delete, all copies of customer data.
Confidentiality
SINAI maintains strict controls over employee access to customer data. The operation of the platform requires that some employees have access to the systems which store and process customer data, in cases such as customer service or troubleshooting requests. These employees are prohibited from using these permissions to view customer data unless it is necessary to do so. We have technical controls and audit policies in place to ensure that employee access to customer data is logged and limited to strict job function requirements. All of our employees and contract personnel are bound to our policies regarding customer data.
Personnel Practices
SINAI carefully conducts reference checks and character assessments for all employees before employment, and employees receive privacy and security training during onboarding as well as on an ongoing basis. All employees are required to read and sign our comprehensive information security policy covering security, availability, and confidentiality.
Infrastructure
SINAI uses infrastructure provided by Amazon Web Services, Inc. (“AWS”) to host or process Customer Data submitted to the SINAI platform. Information about security provided by AWS is available from the AWS Security website. Information about security and privacy-related audits and certifications received by AWS, including information on ISO 27001 certification and SOC reports, is available from the AWS Compliance website.
Get The Most From Your Emission Reduction Investments With SINAI.
Talk To Us
Join our newsletter.
Sign up to stay on top of sustainability insights
and the latest news from SINAI.
Subscribe
Platform
Measure
Engage
Report
Reduce
Solutions
Brazil CVM
Brazil SBCE
California SB 253/261
CSRD
CBAM & PCF
Climate Advisory Services
Energy Management
Utility Management
Scope 3 & Supply Chain
Industries
Industrials & Manufacturing
Mining & Metals
Automotive, Transport, Logistics
Food, Beverage & Agriculture
Consumer Goods
Finance & Banking
Company
About us
News
Careers
Partners
Resources
Blog
Reports & Whitepapers
Webinars & Events
© 2026 SINAI. All rights reserved.
SecurityPrivacy PolicyTerms of ServiceCookie Policy
Your Privacy Choices
Notice at Collection
Talk To Us
Trusted by sustainability teams in multi-site global companies