Security at Rhino FCP

Security and privacy are foundational to the Rhino Federated Computing Platform (Rhino FCP). Rhino FCP is designed to enable organizations to collaborate on sensitive data while allowing data custodians to maintain control over their data and computing environments.

Federated Approach

Unlike traditional approaches that require organizations to centralize or transfer data to a shared environment, Rhino FCP brings computation to where the data already resides.

Data is processed locally within the data custodian's environment, whether deployed on-premises or in the cloud. This allows organizations to collaborate on analytics, AI, machine learning, and other computational workloads without requiring raw data to be transferred to collaborators or centrally stored by Rhino.

This architecture allows organizations to maintain their existing security controls and data governance practices while participating in collaborative workflows.

Defense in Depth

Rhino FCP uses multiple layers of security and privacy controls to protect data, workloads, and platform resources.

Key capabilities include:

• Role-based access control (RBAC) to govern access to data, workloads, and platform functionality.

• Encryption to protect sensitive information and platform resources.

• Comprehensive audit logging to provide visibility and accountability for activity within the platform.

• Secure containerized execution, allowing custom workloads to execute close to the data while providing an isolated environment for processing.

• Privacy-enhancing technologies, including support for techniques such as differential privacy, k-anonymization, and homomorphic encryption.

Together, these controls help organizations limit access to sensitive resources and maintain oversight of how data and workloads are used.

For more information, see Platform Security Measures.

Data Sovereignty and Privacy

Rhino FCP is designed around the principle that organizations should retain control of their data.

Because workloads execute where the data resides, organizations can participate in multi-site and cross-organizational projects without first moving their raw data into a centralized repository. Only the permitted outputs of a computation need to be shared between participating environments.

This approach can help organizations reduce unnecessary data movement and support data sovereignty requirements across different organizations, cloud environments, and geographic regions.

Compliance

Rhino maintains an information security and compliance program designed to support organizations operating in highly regulated environments.

Rhino FCP adheres to security and privacy standards and frameworks including:

• ISO 27001

• SOC 2 Type II

• HIPAA

• GDPR

Learn More

For additional information about Rhino's security practices, compliance program, and available security documentation, visit the Rhino Federated Computing Trust Center at trust.rhinofcp.com.

Or contact us at [e-mail]