Snapshot 178991

Document
Security page
URL
https://humansignal.com/security/
Fetched
HTTP status
200
Content type
text/html; charset=UTF-8
Fetch mode
static
Size
177389 bytes
SHA-256 (raw)
96c1efe7ad52a160a13197121c4ea8757c888a14811239921c469204348d8b0f
SHA-256 (normalized text)
02afa19243be69faa73ef342e86de56c46824f157656f917abd98c5b964f6cda

Normalized text

Scripts and page chrome removed; this is what change detection compares.

RESEARCH: You Can't Buy Taste. We Tested It. →
Label Studio Enterprise
Secure, governed
data access
At HumanSignal, we blend security seamlessly into development and operations workflows to build safe applications that allow our customers to scale while giving them the flexibility to respond to important changes in their business objectives.
Contact Sales
Log in
Email Address
Password
Remember me Forgot Password?
Log In
or
Log In with SSO
Data Security
How we secure your data
Cloud storage
When using cloud storage the app enables restricted access to the storage keys and credentials as well as limited access through pre-signed URLs.
Custom data provider
In the case of a custom data provider (non-cloud storage), the app enables restricted access to the data URI stored in a database. The data access requests are verified and proxied with BasicAuth headers to the specified endpoints. This prevents the URI from being accessed elsewhere by unauthorized users.
API & encryption
API tokens can be reset at any time. All data is encrypted at rest, sensitive data is encrypted in transit. Passwords are additionally hashed.
In Transit
TLS connection is enforced across all product services including:
App
Establishing secure connection by enforcing HTTPS protocol, including secured cookies.
PostgreSQL
SSL mode is enabled with certificates required.
Redis
TLS/SSL is supported and requires client to be authenticated with a valid certificate.
Architecture
The HumanSignal Deployment Model
Data and control planes are separate entities
Data is loaded directly into the annotator browser, bypassing our servers; HumanSignal doesn't need to access or store the data
Optionally enable the VPN connection to protect URLs
Once connected TLS encryption is used for data in transit (when connecting and reading the URLs from bucket and sending annotations back to cloud storage)
Browser / API
Authentication Layer
SAML 2.0 IdP Human Signal Login
Account-based Access Control Organizations
Role-based Access Control
HTTPS
Metadata Storage
HumanSignal VPC
Application Server
Metadata Storage
(PostgreSQL DB)
URLs Input Data Storage — text, images, audio that contain PII
Customer VPC
Storage
Storage
Storage
Storage
Access Control
Secure User Management
Label Studio Enterprise supports single sign-on using SAML to manage access to Label Studio using your existing Identity Provider, or with LDAP authentication. The HumanSignal platform supports the following identity providers:
Microsoft Active Directory
Okta
OneLogin
Ping Federate / Ping Identity / PingOne
Others that use SAML assertions
The HumanSignal platform also supports System for Cross-domain Identity Management (SCIM) version 2.0, a popular protocol to manage access for services and applications across an organization. SCIM interacts with our customer's SSO integration (for example, Okta), allowing them to manage access to The HumanSignal platform workspaces, and grant roles to individual users and groups.
Organization
Acme Inc.
Members Search
Name Email Role
Justin Dalton justin@acme.inc Owner
Diane Nguyen diane@acme.inc Admin
KR Kris Richardson kris@acme.inc Reviewer
Lauren Smith lauren@acme.inc Annotator
HC Hazel Combs hazel@acme.inc Annotator
SP Sam Palmer sam@acme.inc Annotator
See how Label Studio Enterprise can work at your organization.
Contact Sales Compare Versions
VIBE CODE
custom, multimodal UI to capture human judgment
Programmable Interfaces
FULLY PROGRAMMABLE
Create any custom interfaces
MULTIMODAL DATA
Text, images, video, audio, PDFs, time series
EMBEDDABLE
Bring annotation into any application
CONNECTED TO
Full-scale infrastructure used by millions
AI Automation
LLM AS JUDGE
Use models to automate evaluations and benchmarks
AUTOMATED PRELABELING
Use any custom LLM to accelerate annotation
PLUGINS
Hooks to transform and manipulate data
Quality Assurance
AGREEMENT WORKFLOWS
Resolve complex annotations with multiple experts
WORKFORCE MANAGEMENT
Scale human labeling for large projects
ROLES & PERMISSIONS
Integrate into enterprise environments
Data Security & Compliance
Access enterprise data with full respect of your security and governance.