Mazentric builds AI, data and software systems for businesses. We consider security, privacy, responsible data use and operational risk throughout the design, engineering and deployment lifecycle.
Our approach
Technology risk depends on context. The information involved, intended users, deployment environment and business impact all shape the right approach.
Mazentric works to make those considerations explicit during solution scoping and architecture. Controls and documentation are selected according to the sensitivity, risk and requirements of each engagement, rather than assumed to be identical across every system.
Privacy & Data Protection
Mazentric considers applicable privacy and data protection requirements, including South Africa's Protection of Personal Information Act, when designing systems that process personal information. The responsible party remains accountable for determining its obligations and obtaining legal advice where needed.
Client Data
When Mazentric processes information on behalf of a client, data handling requirements can be defined through the engagement scope, technical architecture and contractual arrangements. The detail depends on the system and engagement.
Secure Engineering
Controls are selected according to the architecture, sensitivity, risk and requirements of each engagement. Not every system needs, or uses, the same set of controls.
Solution architecture
Authentication and access control
Least privilege
Input validation and secure API design
Secrets and dependency management
Environment separation
Logging and monitoring
Backups and recovery planning
Code review and deployment controls
From Design to Operation
Understand information, risk and business requirements
Define architecture, access and data flows
Apply security-minded engineering practices
Validate behaviour, access and integrations
Align with environment and operational controls
Monitor, maintain and improve
Responsible AI
AI systems introduce technical, operational and governance considerations beyond traditional software. Mazentric considers the context, data, risk and human impact of AI-enabled solutions when designing them.
Relevant considerations may include appropriate data use, minimisation, human oversight, model limitations, explainability where appropriate, access control, privacy, testing, third-party AI providers, monitoring and responsible business use. The approach is tailored to the system and its intended impact.
Third-Party Technology
Technology solutions may rely on approved third-party platforms, such as cloud infrastructure, databases, AI providers, email, authentication, analytics or communications services, depending on client and project requirements. These dependencies should be considered in the architecture, privacy model, security approach and contractual arrangements.
Deployment & Data Residency
Mazentric solutions can be designed around different deployment requirements, including cloud-hosted environments and client-managed infrastructure where appropriate. Hosting, networking, security and data residency considerations can influence solution design. Enterprise deployment models may differ from public SaaS delivery, subject to technical feasibility and the agreed engagement.
Incident Management
Mazentric's approach to security incidents includes identifying, escalating, containing, investigating and remediating incidents, with client communication handled according to the nature of the event and applicable engagement requirements.
Security Enquiries
For privacy, security or enterprise assurance enquiries, contact [email protected]. Project-specific information may be shared through an appropriate engagement and confidentiality process.
Built Around Client Requirements
Mazentric works with clients to understand the technology, security and operational environment a solution must fit into. Requirements are considered during scoping so that they can inform architecture, delivery and commercial decisions.
Compliance & Project Documentation
Depending on the engagement, Mazentric can work with clients to define and maintain relevant contractual, technical, privacy and operational documentation. Scope and ownership are agreed for the specific project.
Mazentric can discuss architecture, data handling, deployment, integration and governance requirements as part of solution scoping.