# Trust is at our core

## Defense-in-depth security program

Primer secures data and systems across ingestion, storage, access, and transmission—without collecting, controlling, or selling personal information on behalf of customers.

#### Monitoring & Visibility

Production system calls are logged, monitored, and audited via SIEM and IPS to detect anomalous activity and indicators of compromise.

#### Strong Identity & Access

SSO via SAML with MFA for development and production. Least-privilege, role-based access; quarterly access reviews.

#### Secure-by-Design

Security and compliance principles integrated from design through production, with recurring internal and external penetration tests.

## Security at every layer

Resilient multi-cloud deployments on AWS and Microsoft Azure with robust provider controls.

Partnership with Palantir to deliver Primer AI within Palantir FedStart (FedRAMP High, DoD IL5 ATO).

FIPS 140-2 validated hardware key management through cloud service providers.

SIEM/IPS monitoring, alerting, and role-based least-privilege access with quarterly reviews.

## Security practices

Infrastructure Security & Monitoring

Data Security & Encryption

Runtime Monitoring

Access Management

Application Security

Data Privacy

Disaster Recovery

Data Management

Incident Response

## Security compliance and certifications