What we hold, what we will not hold, and how it reaches you.

Nuclir is built on the public record, licensed data, and observation of the physical world. This page says where that data lives, how it is protected in transit and at rest, and the categories we have designed the system never to touch.

The system is designed around information that is meant to be observed.

Nuclir does not ingest classified material, safeguards information, or security-related information about critical facilities, and it is not a place to put it. The intelligence layer is assembled from regulatory and market filings, licensed commercial datasets, and sensor and orbital observation - categories that exist to be read.

That boundary is a design decision rather than a policy we apply afterwards. It keeps the product usable by a buyer's whole team rather than a cleared subset of it, and it means an evaluation does not have to start with a discussion about what we might be storing. Where a question genuinely requires controlled information, the honest answer is that Nuclir is not the system for it.

What you bring stays yours, and stays separated.

The positions, bills of materials and build schedules you bring to compare against the intelligence layer are your data. They are held for your organization, they are not pooled into the shared model, and they are not used to improve anything anyone else sees. Our processing commitments are written down in the data processing agreement rather than described loosely here.

Access is per-organization and role-based, and every third party in the path is named: the subprocessor list is public and versioned, so a security review can be done against a page instead of an email thread. Deletion means deletion, on request and on the end of an agreement.

Post-quantum in transit, encrypted at rest, least privilege by default.

Responses are delivered from the edge closest to the requesting node and secured by post-quantum cryptographic standards for data in transit, which is a decision made now because the traffic being captured now is the traffic that gets decrypted later. Data at rest is encrypted by the managed services it sits on. Internal access follows least privilege: engineers hold the access their work requires, administrative actions are logged, and credentials are rotated rather than shared. What we collect from this website is separate from and much smaller than any of that.

Vulnerability reports are welcome and are answered by a person. Write to the team through contact with enough detail to reproduce, and you will get an acknowledgement rather than a form response.

How the system is put together.

Six commitments that describe the architecture rather than the aspiration. Each one is something a security reviewer can ask us to demonstrate.

Post-quantum in transit

Data in transit is secured by post-quantum cryptographic standards, from the edge node that served it to you.

Encryption at rest

Encrypted at rest on the managed services that hold it, with keys managed rather than embedded.

Tenant separation

Customer data is scoped to the organization that owns it and never merged into the shared model.

Least privilege

Role-based access internally and in the product, with administrative actions logged.

Named subprocessors

Every third party in the data path is listed publicly and versioned, not disclosed on request.

Deletion and export

Your data is exportable and deletable on request and at the end of an agreement.

The honest status of our certifications.

Nuclir is an early-stage company and we are not going to imply otherwise on the page a security team reads first. We do not currently hold a completed SOC 2 or ISO 27001 audit, and this page will say so until the day one is finished, at which point the report will be available under NDA rather than announced as a badge.

If your procurement process requires a specific control set, a questionnaire, or a contractual commitment ahead of that, talk to us and we will answer it directly - including telling you where we do not yet meet it.

Evidence that keeps pace with the decision.

Evaluate Nuclir against the systems, markets, and decisions that matter to your organization. The result is current intelligence with the context needed to use it responsibly.

Request access Speak with the team